Dependency tree uses EOL Solidity version
Axelar Network's assessment for RD-F-174 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
AxelarGateway.sol (primary Ethereum mainnet gateway) compiled at Solidity 0.8.9 (released 2021-09-29, over 3.5 years old). While Solidity has no official EOL schedule, 0.8.9 is 16+ minor versions behind current 0.8.25+ practice and predates numerous compiler improvements. GasService uses 0.8.23 (more current). InterchainGovernance uses 0.8.19. The primary gateway implementation uses an outdated compiler version for a high-TVL contract. Yellow: core contract on outdated but not critically buggy compiler version.
Sources #
- EtherscanAxelarGateway - Outdated Compiler VersionAxelarGateway impl 0x99B5FA03: Solidity v0.8.9+commit.e5eed63a - 3.5+ year old compilerretrieved 2026-05-17
- hardhat.config.js - Compiler Version Configurationhardhat.config.js: 0.8.9 primary, 0.8.23 GasService - mixed compiler versionsretrieved 2026-05-17
Methodology #
Determine whether the deployed code or its dependencies use an EOL or unsupported Solidity version without a forward-compatibility patch.
See the full factor methodology and distribution across all protocols →