Solc version used (known-bug versions flagged)
Centrifuge's assessment for RD-F-170 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Deployed V3.1 contracts compiled with Solidity 0.8.26 (Etherscan Exact Match confirmed) — no known critical bugs at this config. Development repo (foundry.toml) targets Solidity 0.8.28 which has a known HIGH-severity bug: Transient Storage Clearing Helper Collision Bug (fixed in 0.8.34). The bug only affects the viaIR pipeline; foundry.toml does NOT enable via_ir so current deploys are safe. Future deploys from current repo risk this bug if viaIR is enabled.
Sources #
- URL
- https://etherscan.io/address/0x0C1fDfd6a1331a875EA013F3897fc8a76ada5DfC#coderetrieved 2026-04-27
- https://github.com/centrifuge/protocol/blob/main/foundry.tomlretrieved 2026-04-27
Methodology #
Identify the Solidity compiler version used for deployed bytecode and flag if it appears on the known-bug list (solc bugs.json or Vyper 0.2.15–0.3.0 range).
See the full factor methodology and distribution across all protocols →