Solc version used (known-bug versions flagged)
Stake DAO's assessment for RD-F-170 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Primary solc: 0.8.28 (foundry-base-config.toml, vlSDT Etherscan confirmed). Votemarket V1: 0.8.17. LaPoste: 0.8.19. sdCRV: 0.8.7. CurveYCRVVoter: 0.5.17 (EOL — Solidity 0.5.x is unsupported; this is the primary CRV locker holding veCRV position). Known-bug assessment: 0.8.28 TransientStorageClearingHelperCollision bug requires viaIR=true (not enabled per foundry-base-config.toml) — not triggered. 0.5.17 is EOL but contract is simple and non-upgradeable. Yellow for presence of EOL Solidity 0.5.17 in a functionally important but architecturally simple contract.
Sources #
- EtherscanvlSDT Compiler VersionvlSDT 0x94818A7baa7e9F5dC62ce4da1B52ef9a760b80B8 — v0.8.28+commit.7893614aretrieved 2026-05-16
- CurveYCRVVoter Compiler VersionCurveYCRVVoter 0x52f541764E6e90eeBc5c21Ff570De0e2D63766B6 — v0.5.17 EOLretrieved 2026-05-16
Methodology #
Identify the Solidity compiler version used for deployed bytecode and flag if it appears on the known-bug list (solc bugs.json or Vyper 0.2.15–0.3.0 range).
See the full factor methodology and distribution across all protocols →