Solc version used (known-bug versions flagged)
Orca's assessment for RD-F-170 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Solc (Solidity compiler) is not used. Orca Whirlpools is written in Rust 2021 edition targeting BPF/SBF (Solana Bytecode Format). Anchor 0.32.1 is the framework version; it is on the actively maintained 0.x series. Two active GHSA advisories for Anchor affect only the 1.0.0+ release series, not 0.32.1. No Solidity compiler; no solc known-bug list applicable. Rust 2021 edition is current and supported.
Sources #
- GitHubprograms/whirlpool/Cargo.toml (all deps use = pinning)https://github.com/orca-so/whirlpools/blob/main/programs/whirlpool/Cargo.tomlretrieved 2026-05-16
Methodology #
Identify the Solidity compiler version used for deployed bytecode and flag if it appears on the known-bug list (solc bugs.json or Vyper 0.2.15–0.3.0 range).
See the full factor methodology and distribution across all protocols →