Dependency tree uses EOL Solidity version
QuickSwap's assessment for RD-F-174 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
solc 0.5.16 (V2) and solc 0.7.6 (V3) are both EOL/unsupported Solidity versions (current mainline is 0.8.x series). However: (1) both versions have no HIGH/CRITICAL known bugs for these contract patterns, (2) the deployed contracts are fully immutable and cannot be recompiled, (3) V2 has run without incident for ~67 months on these EOL versions. The EOL risk is theoretical for already-deployed immutable bytecode — no forward-compatibility concern exists for immutable contracts. Scored yellow per methodology (on EOL version) but risk is significantly mitigated by immutability.
Sources #
- EtherscanQuickSwap V2 Factory Verified SourceV2 core uses solc 0.5.16 (EOL); V3 core uses solc 0.7.6 (EOL)retrieved 2026-05-16
Methodology #
Determine whether the deployed code or its dependencies use an EOL or unsupported Solidity version without a forward-compatibility patch.
See the full factor methodology and distribution across all protocols →