Deployed bytecode matches signed release tag

Evidence summary #

balancer-deployments repository uses structured task folders with output JSONs containing deployed addresses. Source code is Etherscan-verified. No explicit GPG-signed release tags confirmed from available data. Last v2 commit December 2025. v3 has active development. Repository is public with documented commit history. Unsigned tag pattern is consistent with methodology yellow.

Sources #

Methodology #

Determine whether the deployed runtime bytecode corresponds to a signed git tag in the protocol's repository.

See the full factor methodology and distribution across all protocols →