Stale-approval exposure on deprecated router

Multipli's assessment for RD-F-168 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

V1 StarkEx system is deprecated. V1 contract addresses not confirmed — cannot enumerate stale user approvals outstanding. Code-security-analyst to enumerate V1 addresses and assess approval surface.

Sources #

GitHub
Multipli GitHub — V1 deprecated; addresses not publishedGitHub Barebones-MultipliVault README: V1 used StarkEx; MultipliMigrator.sol confirms V1 migration pathretrieved 2026-05-17

Methodology #

Count the number of active user approvals (ERC-20 `allowance`) to deprecated router or protocol contracts.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol multipli factor RD-F-168 score gray collected_at 2026-05-17 11:48:35