Dependency tree uses EOL Solidity version
Lista DAO's assessment for RD-F-174 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Main repo (lista-dao-contracts): Solidity 0.8.10 — not EOL, in 0.8.x supported line. synclub-contracts: Solidity 0.8.4 — older but still in 0.8.x supported line. Neither is EOL. However, 0.8.4 (Apr 2021, synclub-contracts) is significantly older and carries more known bugs than 0.8.10. Marked yellow because 0.8.4 is a much older version in a security-relevant repo (BNB staking with real TVL).
Sources #
- GitHubsynclub-contracts foundry.toml — solc 0.8.4lista-dao-contracts foundry.toml: solc 0.8.10; synclub-contracts foundry.toml: solc 0.8.4retrieved 2026-05-12
- lista-dao-contracts foundry.toml — solc 0.8.10lista-dao-contracts foundry.toml: solc 0.8.10retrieved 2026-05-12
Methodology #
Determine whether the deployed code or its dependencies use an EOL or unsupported Solidity version without a forward-compatibility patch.
See the full factor methodology and distribution across all protocols →