Code complexity vs audit coverage

Evidence summary #

V3 codebase is a Uniswap V3 fork — well-understood codebase with 4 dedicated audit engagements (SlowMist x2, PeckShield x2) in March-April 2023. Infinity has 3 firm audits (Hexens, OtterSec, Zellic) for both core and periphery components. No auditor noted insufficient time relative to code size in public disclosures.

Sources #

Methodology #

Determine whether the cyclomatic complexity or LOC-per-audit-day ratio exceeds the curator-declared credibility threshold for the audit to be meaningful.

See the full factor methodology and distribution across all protocols →