Criteria Changelog

All future changes to the Issue criteria page will be logged here.

1.12 - 24/06/2025

---

Batch 7: https://github.com/sherlock-protocol/sherlock-v2-docs/pull/62

• SJIP 25: Clarify the guideline about invariants/properties

• SJIP 26: Clarify how to determine if the protocol role is trusted

• SJIP 27: Update the guideline about accidental token transfers

• SJIP 28: Clarify where the protocol team should list their known issues and acceptable risk

• SJIP 29: Clarify the guideline about repetitive DOS attacks

1.11 - 06/02/2025

---

Batch 6: Links are added to each SJIP separately

• SJIP 20: Clarify that acknowledged issues are not valid

• SJIP 21: Clarify front-running on chains with private mempool

• SJIP 22: Remove the min/maxAnser guideline

• SJIP 23: Clarify Oracle Staleness

• SJIP 24: Likelihood is not considered during judging

1.10 - 12/11/2024

---

Batch 5: https://github.com/sherlock-protocol/sherlock-v2-docs/pull/46

• SJIP 19: Update judging process

1.9 - 12/09/2024

---

Batch 4: https://github.com/sherlock-protocol/sherlock-v2-docs/pull/45

• SJIP 14: Clarify High and Medium severities

• SJIP 15: Off-chain mechanisms question

• SJIP 16: Clarify future integrations and invariants in the README and Judging Rules

• SJIP 17: Remove Legacy Report Template

• SJIP 18: Remove the question about hardcoded values

1.8 - 08/07/2024

---

Batch 3: https://github.com/sherlock-protocol/sherlock-v2-docs/pull/41/

• SJIP-11: Introduce new report template

• SJIP-12: Clarify duplication considerations

• SJIP-13: Fix typo

1.7 - 10/06/2024

---

Batch 2: https://github.com/sherlock-protocol/sherlock-v2-docs/pull/34

• SJIP-7: Duplication

• SJIP-8: Missing Curcuit Breaker Checks

• SJIP-9: Change Trusted/Restricted Logic

1.6 - 17/05/2024

---

Batch 1: https://github.com/sherlock-protocol/sherlock-v2-docs/pull/24

• SJIP-5: Update hierarchy of truth

• SJIP-6: Improve known issue question in contest QA

1.5 - 29/01/2024

---

• Historical decisions are no longer considered sources of truth. They may guide Watsons, but judgments should always be based on rules as they are and mistakes should not be repeated. Private messages are not sources of truth.

• Updated the and sections to better explain what high and medium severity issues are. Repealed the description.

• Added an exception to the hierarchy of truth for cases where blatant mistakes in a higher source of truth were made.

• Specified opportunity loss and design choices to be out of scope.

• Updated the section to require the PoC in more cases and ensure that Watsons need to discover the limitations and constraints of the issue being triggered.

• Rephrased the "Future issues" rule to remove ambiguity.

• Changed words in several places to ensure ease of understanding. Typo fixes.

1.4 - 10/11/2023

---

• Made network liveness our of scope, with an exception of sequencer-like issues if they are preventable and the external admin is restricted in the section.

1.3 - 12/10/2023

---

• Addition of CHANGELOG to the docs.

• Addition of rule related to CHANGELOG in the point Hierarchy of truth in the section

1.2 - 12/09/2023

---

• Some minor changes in the judging criteria documentation structure

• Added the Contract Scope: sub-section under section in the judging criteria.

• Added the section in the judging criteria: https://docs.sherlock.xyz/audits/judging/judging#vi.-requirements

• Added Non-Standard tokens: point in the section

• Extended the EIP compliance point in the

1.1 - 01/08/2023

---

• Added rules for escalations:

• Added the External Admin trust assumptions sub-section under