Audit firm tier

Convex Finance's assessment for RD-F-005 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Audit firms engaged: MixBytes (Tier-2 established firm), PeckShield (Tier-2), Nomoi (boutique), ChainSecurity (Tier-2). No Tier-1 firm (Trail of Bits, OpenZeppelin, ConsenSys Diligence, Certora, Sigma Prime, Spearbit, Zellic) has a public PDF audit of Convex. OZ had an informal review in 2021 but no formal published report. Yellow: Tier-2 only, no Tier-1 public audit.

Sources #

URL
OpenZeppelin vulnerability disclosure (no formal audit PDF)OpenZeppelin informal review mentionretrieved 2026-05-16
Docs
Convex Finance FAQ: AuditsConvex Finance audits pageretrieved 2026-05-16

Methodology #

Classify each auditing firm into: Tier-1 (Trail of Bits / OpenZeppelin / ConsenSys Diligence / Certora / Sigma Prime / Spearbit / Zellic) / Tier-2 (established, named firm with public track record) / boutique / unknown.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol convex-finance factor RD-F-005 score yellow collected_at 2026-05-16 02:41:28