Dependency tree uses EOL Solidity version

PancakeSwap's assessment for RD-F-174 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

V2 contracts compiled with Solidity 0.5.16 (last release 2020, EOL). V3 contracts compiled with Solidity 0.7.6 (last release 2020, EOL). Both V2 and V3 are immutable deployments — they cannot be recompiled. The EOL risk is limited to inability to patch bugs via recompilation, but contracts are also permanently frozen. Infinity uses 0.8.26 (supported). Yellow assigned because V2/V3 compiler is EOL even though immutability limits the practical risk.

Sources #

Etherscan
V3 Factory BscScanBscScan V3 Factory — Solidity 0.7.6retrieved 2026-04-29
Etherscan
V2 Factory BscScanBscScan V2 Factory — Solidity 0.5.16retrieved 2026-04-29

Methodology #

Determine whether the deployed code or its dependencies use an EOL or unsupported Solidity version without a forward-compatibility patch.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol pancakeswap factor RD-F-174 score yellow collected_at 2026-04-28 19:10:57