What is considered as high, low, or passable rating?
Better to read the
procedure of how these audits processed,
Testing should have been given more weight. I prefer 40 instead of the current 20.
Audit before or after deployment is really important but I think 50 should be enough.
What does the color in your table represents by the way?
......
In this case even though Hex embed their GitHub on the website but the main development was not there, looks like they using GitLab to develop the project and high likely they set it as private so there is nothing visible to tests. Whos know how long they will keep it as private and will open it to public.
One reason why I'm critical with its current rating is that HEX has been tagged as a ponzi scheme. They're giving insane returns while it's not really clear where the fund is coming from. Maybe the code could at least give us a better look if it can be viewed and tested publicly.