Deprecated contract paused but pause reversible by live admin
Sanctum's assessment for RD-F-167 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No deprecated Sanctum program contracts with material TVL identified. The unstake.it branding was retired but the Unstake program (unpXTU2Ndrc7WWNyEhQWe4udTzSibLPi25SXv2xbCHQ) is the same active on-chain program. The unstake.it domain was lost to a third party in July 2024, but the on-chain program was unaffected. Socean Stake Pool (2021 predecessor) is separate. No active deprecated contracts holding material value identified.
Sources #
- URLSolana Based Sanctum Protocol Sounds Alarm On Compromised WebsiteCoingape: Sanctum warns users of compromised unstake.it domain (July 2024) — on-chain programs unaffectedretrieved 2026-05-04
Methodology #
Determine whether a deprecated-and-paused contract's pause state is revertible by a currently-live admin role.
See the full factor methodology and distribution across all protocols →