Solc version used (known-bug versions flagged)
Axelar Network's assessment for RD-F-170 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
AxelarGateway.sol (deployed Ethereum mainnet impl 0x99B5FA03) was compiled at Solidity 0.8.9+commit.e5eed63a. hardhat.config.js configures 0.8.9 as primary compiler and 0.8.23 for AxelarGasService. Solidity 0.8.9 has one documented known bug: UserDefinedValueTypesBug (storage layout for user-defined value types shorter than 32 bytes, severity: very low). No high/critical bugs documented specifically for 0.8.9. Version is 3+ years old and outdated relative to current practice (0.8.25+). Yellow: on an outdated version but no high/critical bugs specifically affecting 0.8.9.
Sources #
- URLSolidity 0.8.9 Known BugsSolidity 0.8.9 known bugs: UserDefinedValueTypesBug (very low severity) - no high bugsretrieved 2026-05-17
- AxelarGateway Implementation Compiler VersionAxelarGateway impl verified at v0.8.9+commit.e5eed63aretrieved 2026-05-17
- axelar-cgp-solidity hardhat.config.js - Compiler Versionshardhat.config.js: solidity versions 0.8.9 (primary) and 0.8.23 (GasService)retrieved 2026-05-17
Methodology #
Identify the Solidity compiler version used for deployed bytecode and flag if it appears on the known-bug list (solc bugs.json or Vyper 0.2.15–0.3.0 range).
See the full factor methodology and distribution across all protocols →