Code complexity vs audit coverage

Evidence summary #

V2 is a modular mixin architecture (~12 mixin files). Two audit firms (Cantina + Quantstamp) both reviewed V2 in March 2026. Audit duration not determinable from PDF (binary). The parallel two-firm audit approach mitigates single-firm coverage gaps. Marking yellow due to inability to verify LOC/audit-day ratio.

Sources #

Methodology #

Determine whether the cyclomatic complexity or LOC-per-audit-day ratio exceeds the curator-declared credibility threshold for the audit to be meaningful.

See the full factor methodology and distribution across all protocols →