Solc version used (known-bug versions flagged)
Aave v3's assessment for RD-F-170 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
v3.6.0 compiles with solc 0.8.27. Current stable is 0.8.34 (7 minor versions behind). Known bug TransientStorageClearingHelperCollision (fixed in 0.8.34) requires --via-ir flag to activate. Aave v3.6.0 does NOT use --via-ir (uses Shanghai EVM without IR pipeline), so the specific known bug is non-applicable to current deployments. Yellow because compiler is significantly behind and future configuration changes could activate unmitigated bugs.
Sources #
- URLSolidity Compiler ReleasesSolidity 0.8.28–0.8.34 release notes (TransientStorageClearingHelperCollision)retrieved 2026-04-27
- aave-v3-origin Build Configurationaave-v3-origin foundry.toml — compiler version solc 0.8.27retrieved 2026-04-27
Methodology #
Identify the Solidity compiler version used for deployed bytecode and flag if it appears on the known-bug list (solc bugs.json or Vyper 0.2.15–0.3.0 range).
See the full factor methodology and distribution across all protocols →