Fix-merged-but-not-deployed gap

BlackRock USD Institutional Digital Liquidity Fund (BUIDL)'s assessment for RD-F-140 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No public repo; not assessable. Cannot compare merged PRs to deployed bytecode.

Sources #

Curator note
No official GitHub for BUIDL contracts confirmed as of 2026-04-26; Securitize GitHub (github.com/securitize-io) does not contain BUIDL-specific deployment contracts.retrieved 2026-04-26

Methodology #

Determine whether a known vulnerability has a PR merged in the repo but the fix has not been included in the deployed bytecode.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol blackrock-buidl factor RD-F-140 score gray collected_at 2026-05-12 09:40:42