Audit-to-deploy gap
crvUSD (Curve Stablecoin)'s assessment for RD-F-006 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
MixBytes audit period: April 10 – June 5, 2023. crvUSD mainnet deploy: May 3, 2023. The deploy preceded audit completion by ~33 days (concurrent audit model). Threshold: green ≤60d (audit complete before deploy). The concurrent model (deploy before audit finalization) is unusual but used by Curve; the audit actively ran at the time of deploy. Marking yellow for non-standard pattern.
Sources #
- URLCurve Finance Deploys Native Stablecoin on Ethereum Mainnet — CoinDeskCoinDesk: crvUSD deployed May 3, 2023retrieved 2026-05-16
- Curve Stablecoin (crvUSD) Security Audit README — MixBytesMixBytes README — audit dates April 10 to June 1/5, 2023retrieved 2026-05-16
Methodology #
Measure the number of days between the audit report sign-off date and the mainnet deploy of the audited bytecode.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol crvusd factor RD-F-006 score yellow collected_at 2026-05-16 19:09:40