Solc version used (known-bug versions flagged)
JustLend DAO's assessment for RD-F-170 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
TronSolc 0.5.16 confirmed in tronbox.js. Standard solc 0.5.16 is not on high-severity known-bug list. However: (1) TronSolc is a DIVERGENT fork of solc compiling to TVM bytecode — bugs in TronSolc fork-specific code are not tracked in standard solc bugs.json; (2) solc 0.5.x is EOL without security updates from Solidity team; (3) TronSolc bug surface is unassessable from public advisory databases. Yellow: standard version not on known-high-bug list, but TronSolc fork divergence creates untracked risk.
Sources #
- GitHubTRON-US tron-solc-bin — TronSolc fork repositoryTRON-US tron-solc-bin — maintains TRON-specific compiler forks not tracked in standard solc bugs.jsonretrieved 2026-05-17
- JustLend tronbox.js — TronSolc 0.5.16 compiler configtronbox.js: solc version 0.5.16, optimizer runs 10000, evm_version istanbul — confirms TronSolc 0.5.16retrieved 2026-05-17
Methodology #
Identify the Solidity compiler version used for deployed bytecode and flag if it appears on the known-bug list (solc bugs.json or Vyper 0.2.15–0.3.0 range).
See the full factor methodology and distribution across all protocols →