defirisk.co
rubric v1.7.0

GitHub force-push to sensitive branch

crvUSD (Curve Stablecoin)'s assessment for RD-F-108 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

GitHub force-push / sensitive-branch push. Applicable: curvefi/curve-stablecoin repo (https://github.com/curvefi/curve-stablecoin). Last commit 2026-05-15 per data cache. No public reports of force-push attacks or unauthorized sensitive-branch pushes on curvefi repos. Repo has normal commit cadence; no security alerts on GitHub. Signal would NOT fire today.

Sources #

  • GitHub
    curvefi/curve-stablecoin GitHubcurvefi/curve-stablecoin — last commit 2026-05-15; normal commit cadence; no force-push reportsretrieved 2026-05-16
  • Internal
    crvUSD data cache GitHub fields00-data-cache.json github.last_commit_date=2026-05-15retrieved 2026-05-16

Methodology #

Detect whether the repository shows a force-push or push to a sensitive branch (main, production tag) from a non-protocol account.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol crvusd factor RD-F-108 score green collected_at 2026-05-16 19:09:40