Shared-library version with known-vuln status

Evidence summary #

V3: @openzeppelin/contracts 3.4.2-solc-0.7 — no active high/critical GHSA advisory for OZ 3.4.x affecting AMM patterns (no upgradeable proxy, no governance in V3 core). V2: no OZ dependency in core pair/factory. Infinity: Foundry-based with solc 0.8.26 — newer stack. No active library advisory identified for the deployed versions.

Sources #

Methodology #

Identify the version of key shared libraries (OZ, Solady, Solmate) used and check against CVE/GHSA databases for any active advisory.

See the full factor methodology and distribution across all protocols →