Going to address this head on. We did not just audit the refactor diff from Drift to Velocity. We audited the *entire* codebase.
This couldn't be further from a rush job. If we wanted to rush it, we could have just audited the diff, called the old code fine, and launched months ago.
We wanted to err on the side of safety, which meant re-auditing the full codebase. This is expensive, and takes a long time. Drift is one of the largest Solana programs in existence with tens of thousands of lines of code. But it was the right thing to do, because safety is our priority.
Yes, it's a lot of findings. But relative to the amount of code, it makes sense. Most findings were in pre-refactor code, and most of them would not result in LoF in any real situation.
It was a herculean effort to (1) review this massive monolith, thanks auditors! (2) fix every issue no matter how small. That is why the launch has been pushed back so far.
One word - Rushed.
154 audit findings is crazy high & even after fixes does not guarantee no side effects from the changes made.