defirisk.co
rubric v1.7.0

Deprecated contracts still holding value

Sushi (SushiSwap) — v2 + v3 + Trident + BentoBox/Kashi + SushiXSwap's assessment for RD-F-166 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

BentoBoxV1 (0xF5BCE5077908a1b7370B9ae04AdC565EBd643966) was part of the Kashi 1.0 / MISO v2 deprecation announced December 7, 2022 (sushi.com blog). As of 2026-05-17, BentoBoxV1 holds ~$727,226 in ERC-20 tokens (MIM ~$564K, xSUSHI ~$37K, SUSHI ~$13K, + 349 token types totaling). Substantially exceeds the $100K materiality threshold. Deprecated contract continues to hold material user assets that have not been drained or migrated despite the Dec 2022 sunset announcement.

Sources #

Methodology #

Determine whether contracts marked deprecated by a protocol announcement still hold >$100K in assets.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sushi factor RD-F-166 score red collected_at 2026-05-16 19:50:37