Stale-approval exposure on deprecated router

Sanctum's assessment for RD-F-168 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Not applicable. Solana uses a token account ownership model, not ERC-20 approval-based access. Users do not grant allowances to deprecated Sanctum programs. Stake accounts are held by the SPL stake pool program directly. The domain loss of unstake.it (July 2024) affected the frontend but not any on-chain token approvals.

Sources #

Docs
Solana account ownership model — not approval-basedSolana account model: no ERC-20 approve() pattern; SPL token accounts use owner-based access controlretrieved 2026-05-04

Methodology #

Count the number of active user approvals (ERC-20 `allowance`) to deprecated router or protocol contracts.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sanctum factor RD-F-168 score not_applicable collected_at 2026-05-04 18:49:23