Deployed bytecode matches signed release tag
Sushi (SushiSwap) — v2 + v3 + Trident + BentoBox/Kashi + SushiXSwap's assessment for RD-F-136 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
V2/V3 core contracts and BentoBox are mature immutable contracts. Bytecode-to-signed-release-tag matching requires local toolchain not available in this pass. Data-cache notes v2-core last commit 2025-10-09; changelog present. Full bytecode verification deferred.
Sources #
- Internal00-data-cache.jsondata-cache — github.com/sushiswap/v2-core last commit 2025-10-09, changelog_present=trueretrieved 2026-05-17
Methodology #
Determine whether the deployed runtime bytecode corresponds to a signed git tag in the protocol's repository.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol sushi factor RD-F-136 score gray collected_at 2026-05-16 19:50:37