defirisk.co
rubric v1.7.0

Dependency tree uses EOL Solidity version

QuickSwap's assessment for RD-F-174 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

solc 0.5.16 (V2) and solc 0.7.6 (V3) are both EOL/unsupported Solidity versions (current mainline is 0.8.x series). However: (1) both versions have no HIGH/CRITICAL known bugs for these contract patterns, (2) the deployed contracts are fully immutable and cannot be recompiled, (3) V2 has run without incident for ~67 months on these EOL versions. The EOL risk is theoretical for already-deployed immutable bytecode — no forward-compatibility concern exists for immutable contracts. Scored yellow per methodology (on EOL version) but risk is significantly mitigated by immutability.

Sources #

Methodology #

Determine whether the deployed code or its dependencies use an EOL or unsupported Solidity version without a forward-compatibility patch.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol quickswap factor RD-F-174 score yellow collected_at 2026-05-16 08:48:31