defirisk.co
rubric v1.7.0

Solc version used (known-bug versions flagged)

Lista DAO's assessment for RD-F-170 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Main repo (foundry.toml): Solidity 0.8.10. Known bugs affecting 0.8.10 not yet fixed in that version: (1) AbiReencodingHeadOverflowWithStaticArrayCleanup — medium, fixed 0.8.16; (2) StorageWriteRemovalBeforeConditionalTermination — medium, fixed 0.8.17; (3) DataLocationChangeInInternalOverride — very low, fixed 0.8.14. Medium-severity bugs require specific language constructs to trigger. EVM version set to 'shanghai' in foundry.toml (unusual for BSC but affects compilation target only). synclub-contracts uses 0.8.4 (older, carries more known bugs). No high/critical bugs in 0.8.10 specifically identified.

Sources #

  • URL
    Etherscan Solc Known BugsEtherscan solcbuginfo — AbiReencodingHeadOverflowWithStaticArrayCleanup (med, fixed 0.8.16), StorageWriteRemovalBeforeConditionalTermination (med, fixed 0.8.17) both affect 0.8.10retrieved 2026-05-12
  • GitHub
    Lista DAO foundry.tomlfoundry.toml — solc_version = 0.8.10, evm_version = shanghai, optimizer runs = 100retrieved 2026-05-12

Methodology #

Identify the Solidity compiler version used for deployed bytecode and flag if it appears on the known-bug list (solc bugs.json or Vyper 0.2.15–0.3.0 range).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol lista-dao factor RD-F-170 score yellow collected_at 2026-05-12 17:54:05