Upstream vulnerability disclosure (last 90d)

Jito's assessment for RD-F-128 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

The April 2025 ZK ElGamal Proof Bug (within trailing 90 days) was patched by Jito same-day (v2.1.21-jito). The current mainnet v3.1.14-jito (Apr 28, 2026) is on a fully patched stable branch. No current unpatched upstream disclosure affecting deployed jito-solana versions.

Sources #

URL
Solana ZK ElGamal Post-mortemSolana post-mortem ZK ElGamal Proof Bug May 2025retrieved 2026-04-29
GitHub
jito-solana Latest Releasev3.1.14-jito released Apr 28 2026 on stable branchretrieved 2026-04-29

Methodology #

Determine whether the upstream has a public vulnerability disclosure in the last 90 days that affects this fork's deployed code.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol jito factor RD-F-128 score green collected_at 2026-04-29 15:50:23