Fix-merged-but-not-deployed gap
Stake DAO's assessment for RD-F-140 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No known open vulnerability with a merged fix awaiting deployment. No post-mortem or disclosed gap identified for Stake DAO proper. No incidents on record requiring a fix-deploy gap analysis.
Sources #
- GitHubStake DAO Audits RepositoryAudits repo shows no outstanding unfixed critical findings; all audit rounds have documented fix cyclesretrieved 2026-05-16
Methodology #
Determine whether a known vulnerability has a PR merged in the repo but the fix has not been included in the deployed bytecode.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol stake-dao factor RD-F-140 score green collected_at 2026-05-16 12:29:20