Executive Summary
bench3.ai assessed the identified OUSG public execution surfaces on Ethereum, Polygon, Solana and XRP Ledger. The work addressed deployment identity, permissioned transfers, privileged issuance and redemption, NAV consumption, dormant-network posture, non-EVM issuer controls, cross-ledger reconciliation evidence, and the public relationship between token balances and interests in Ondo I LP. [E01-E06; S01-S08; S10; S11]
Assessment conclusion
OUSG-KR-01 is an open known control risk: the reviewed TOKENIZED_RWA price path exposes a timestamp but does not enforce a maximum age before use. The technical condition is established. Authoritative NAV-validity rules, the effectiveness of compensating operating controls and realistic economic exposure were not sufficiently evidenced to assign a risk rating. No investor-loss vulnerability was substantiated; that evidence limit is not a low-risk conclusion. Four additional control observations remain applicable to the assessed deployments.
| Classification | Recorded result |
|---|---|
| Severity-assigned vulnerabilities | Critical 0 | High 0 | Medium 0 | Low 0 |
| Known unresolved risks | 1; OUSG-KR-01. Technical condition established; economic risk rating unassigned. This item is excluded from the severity totals above, not dismissed. |
| Control observations | 4; privileged control, dormant-network reactivation, XRP Ledger operations and cross-ledger reconciliation |
| Unconfirmed candidates | 0 |