defirisk.co
rubric v1.7.0

Deprecated contract paused but pause reversible by live admin

Sushi (SushiSwap) — v2 + v3 + Trident + BentoBox/Kashi + SushiXSwap's assessment for RD-F-167 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Trident AMM deprecated 2024. RouteProcessor2 removed from UI post-exploit (Apr 2023). Neither deprecated contract can be paused or resumed by admin — they are immutable. The admin has no reversible pause power over deprecated surfaces. V2 factory and V3 factory (immutable) remain active, not deprecated. Scored green: no admin-reversible-pause power exists over deprecated contracts.

Sources #

  • Internal
    00-profile.md §3Profile §3 — RouteProcessor2 listed as 'removed from production'; Trident deprecated 2024retrieved 2026-05-17
  • URL
    RouteProcessor2 Post Mortem — SushiRouteProcessor2 post-mortem — 'contract was non-upgradeable, could not be paused, not possible to revoke access'retrieved 2026-05-17

Methodology #

Determine whether a deprecated-and-paused contract's pause state is revertible by a currently-live admin role.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sushi factor RD-F-167 score green collected_at 2026-05-16 19:50:37