defirisk.co
rubric v1.7.0

Deprecated contract paused but pause reversible by live admin

Compound V3 (Comet)'s assessment for RD-F-167 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Compound V2 (predecessor protocol) shares the same Timelock (0x6d903f) and GovernorBravo governance infrastructure. V2 is active (not deprecated), so no deprecated surface in strict sense. However the shared Timelock constitutes admin scope extension — governance affecting Timelock affects both V2 and V3 simultaneously. Community MultiSig holds pause guardian rights over both V2 and V3. Data cache: has_legacy_v1 = true.

Sources #

Methodology #

Determine whether a deprecated-and-paused contract's pause state is revertible by a currently-live admin role.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol compound-v3 factor RD-F-167 score yellow collected_at 2026-04-28 00:20:50