Stale-approval exposure on deprecated router

Centrifuge's assessment for RD-F-168 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Tinlake is deprecated (pools frozen, no new originations). Tinlake contracts (CentrifugeRouter v2, Tinlake pool contracts) remain deployed on Ethereum mainnet. Users who approved Tinlake contracts still have open ERC-20 approvals to deprecated contracts. No evidence of an off-ramp notice or revoke advisory published by Centrifuge. Legacy WCFG also deprecated.

Sources #

GitHub
https://github.com/centrifuge/tinlake-pools-mainnetretrieved 2026-04-27
URL
https://docs.centrifuge.io/developer/legacy/tinlake/retrieved 2026-04-27

Methodology #

Count the number of active user approvals (ERC-20 `allowance`) to deprecated router or protocol contracts.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol centrifuge factor RD-F-168 score yellow collected_at 2026-04-30 21:19:10