★ Audit scope mismatch

Fluid's assessment for RD-F-001 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Seven confirmed distinct audit engagements across 4 firms. FluidLiquidityDummyImpl (0xCc331…) deployed with solc v0.8.29 ~30 days before assessment; original StateMind audit commit a324cc2 is 2+ years old. StateMind 2026-03-02 is a PR-validation spot review, not full bytecode audit. Rolling re-audit cadence partially mitigates but bytecode-level commit match to any current audit not confirmed.

Sources #

Audit
StateMind Fluid AuditStateMind Fluid Audit 2023-12-29 commit a324cc2retrieved 2026-04-29
Etherscan
FluidLiquidityDummyImpl EtherscanFluidLiquidityDummyImpl 0xCc331daf69752bece3dc98dbc63eacd5092266a2 solc v0.8.29 deployed ~2026-03-30retrieved 2026-04-29
Audit
StateMind Fluid PR ValidationStateMind Fluid PR Validation 2026-03-02retrieved 2026-04-29

Methodology #

Check whether the commit SHA cited in the audit report matches the bytecode deployed at the production proxy/implementation address.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol fluid factor RD-F-001 score yellow collected_at 2026-04-29 10:35:01