Dependency tree uses EOL Solidity version
Across Protocol's assessment for RD-F-174 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Current contracts use solc 0.8.30 (foundry.toml). HubPool was compiled with solc 0.8.13 per Etherscan metadata. Both 0.8.13 and 0.8.30 are within the supported Solidity 0.8.x series (EOL has not been declared for any 0.8.x sub-version as of assessment date; Solidity maintains the latest 0.8.x as active). OZ 5.5.0 / 4.9.6 dependencies are on supported versions. Solana/Rust programs use @coral-xyz/anchor 0.31.1 (supported). No EOL version identified in the core dependency tree.
Sources #
- URLhttps://www.soliditylang.org/blog/category/releases/retrieved 2026-04-28
- https://etherscan.io/address/0xc186fa914353c44b2e33ebe05f21846f1048bedaretrieved 2026-04-28
- https://github.com/across-protocol/contracts/blob/master/foundry.tomlretrieved 2026-04-28
Methodology #
Determine whether the deployed code or its dependencies use an EOL or unsupported Solidity version without a forward-compatibility patch.
See the full factor methodology and distribution across all protocols →