Deprecated contract paused but pause reversible by live admin

Evidence summary #

Multiple deprecated deposit pool versions exist (v1.0, v1.1, v1.2). The guardian (team EOA) retains RocketStorage access and could theoretically re-register deprecated contracts. However, deprecated contracts not currently registered in RocketStorage cannot receive protocol calls. Old deposit pool versions have minimal current user interaction. Yellow due to guardian's unrevoked power over the storage registry which includes deprecated contract surfaces.

Sources #

Methodology #

Determine whether a deprecated-and-paused contract's pause state is revertible by a currently-live admin role.

See the full factor methodology and distribution across all protocols →