Stale-approval exposure on deprecated router

Evidence summary #

The jupiter-cpi repo (CPI interface shim) was archived November 2025. Jupiter aggregator does not require persistent ERC-20-style unlimited approvals — each Solana swap requires user-signed transaction approval per transaction. Stale approval risk is materially lower than EVM approve-once patterns. No deprecated contracts holding meaningful user approval surface identified.

Sources #

Methodology #

Count the number of active user approvals (ERC-20 `allowance`) to deprecated router or protocol contracts.

See the full factor methodology and distribution across all protocols →