Dependency tree uses EOL Solidity version
JustLend DAO's assessment for RD-F-174 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
TronSolc 0.5.16 (EOL Solidity version) used for all deployed contracts. Standard Solidity 0.5.x EOL — no security updates from Solidity team since 0.5.17 (June 2020). TronSolc is the only practical compiler for existing TVM contracts given TVM's limited compatibility with newer Solidity versions. Yellow rather than red: this is a structural substrate constraint (TRON ecosystem) rather than a discretionary choice by the protocol team.
Sources #
- GitHubJustLend tronbox.js — solc 0.5.16 (EOL) confirmedtronbox.js: solc 0.5.16 — confirms EOL Solidity version for all deployed contractsretrieved 2026-05-17
- TronBox compile documentation — supported Solidity versionsTronBox compiler support — TronSolc 0.5.16 is primary TRON compiler; newer versions have limited TVM compatibilityretrieved 2026-05-17
Methodology #
Determine whether the deployed code or its dependencies use an EOL or unsupported Solidity version without a forward-compatibility patch.
See the full factor methodology and distribution across all protocols →