defirisk.co
rubric v1.7.0

Dependency tree uses EOL Solidity version

Sky Lending (formerly MakerDAO)'s assessment for RD-F-174 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Core Vat uses Solidity 0.5.12 (EOL since 0.6.0 December 2019). Liquidations 2.0 contracts use 0.6.12 (EOL since 0.7.0 July 2020). Endgame contracts use 0.8.21 (current). EOL risk is static for immutable Vat; optimizer disabled for 0.5.12 deploy eliminates optimizer-class bugs. Practical risk low but factor fires on EOL versions in deployed dependency tree.

Sources #

  • URL
    https://docs.soliditylang.org/en/latest/bugs.htmlretrieved 2026-04-27
  • Etherscan
    https://etherscan.io/address/0x35D1b3F3D7966A1DFe207aa4514C12a259A0492Bretrieved 2026-04-27

Methodology #

Determine whether the deployed code or its dependencies use an EOL or unsupported Solidity version without a forward-compatibility patch.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sky-lending factor RD-F-174 score yellow collected_at 2026-04-28 00:43:18