Solc version used (known-bug versions flagged)
Hyperliquid's assessment for RD-F-170 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Bridge2.sol declares pragma solidity ^0.8.9. The ^ range pragma means the actual compiled version was selected by the build toolchain and could be anywhere from 0.8.9 to the latest 0.8.x at time of compilation. Arbiscan returned 403 during assessment — exact compiled version unconfirmed. Solidity 0.8.28–0.8.33 contains a high-severity TransientStorageClearingHelperCollision bug; Bridge2 does NOT use transient storage (no TSTORE/TLOAD), so this known bug is not applicable. Most critical known bugs in 0.8.9+ range are not applicable to Bridge2's simple storage pattern, but the exact version is not confirmed.
Sources #
- EtherscanBridge2 contract on ArbiscanBridge2 contract on Arbiscan — 403 returned during assessment, exact compiler version unconfirmedretrieved 2026-04-28
Methodology #
Identify the Solidity compiler version used for deployed bytecode and flag if it appears on the known-bug list (solc bugs.json or Vyper 0.2.15–0.3.0 range).
See the full factor methodology and distribution across all protocols →