Solc version used (known-bug versions flagged)
QuickSwap's assessment for RD-F-170 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
V2 core contracts: solc 0.5.16 — on known-bug list with 7 bugs (SignedArrayStorageCopy LOW, ABIEncoderV2LoopYulOptimizer LOW, 5 others LOW/VERY LOW). UniswapV2Factory/Pair do NOT use experimental ABIEncoderV2 or signed-int storage arrays so the most relevant bugs are not triggered. V3 core/periphery: solc 0.7.6 — on known-bug list with 7 bugs (FreeFunctionRedefinition LOW, MemoryArrayCreationOverflow LOW, 5 VERY LOW). No HIGH/CRITICAL bugs on known-bug list for either version relevant to these contract types. Both versions are on the known-bug list (methodology: yellow = on list with low/medium severity bugs only). Scored yellow per methodology threshold.
Sources #
- URLEtherscan Solidity Compiler Bug InfoEtherscan solcbuginfo — 0.5.16: 7 bugs (LOW/VERY LOW); 0.7.6: 7 bugs (LOW/VERY LOW)retrieved 2026-05-16
- AlgebraFactory Verified SourceAlgebraFactory — solc v0.7.6+commit.7338295f, 0 runsretrieved 2026-05-16
- QuickSwap V2 Factory Verified SourceV2 Factory — solc v0.5.16+commit.9c3226ce, 999999 runsretrieved 2026-05-16
Methodology #
Identify the Solidity compiler version used for deployed bytecode and flag if it appears on the known-bug list (solc bugs.json or Vyper 0.2.15–0.3.0 range).
See the full factor methodology and distribution across all protocols →