defirisk.co
rubric v1.7.0

Deprecated contracts still holding value

SUNSwap (sun.io)'s assessment for RD-F-166 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Two deprecated Smart Router addresses (TJ4NNy8xZEqsowCBhLvZ45LCqPdGjkET5j and TFVisXFaijZfeyeSjCEVkHfex7HGdTxzF9) are explicitly listed as deprecated on official SUN.io docs (docs.sun.io/developers/swap/smart-router). These are approval surfaces — users granted TRC-20 token allowances to these router contracts. Neither the Sep 2024 router upgrade announcement nor the Feb 2026 Universal Router/Permit2 announcement included guidance for users to revoke approvals to deprecated addresses. TRON-native approval scanners (Revoke.cash, DeBank) do not support TVM contracts; stale approval count cannot be quantified but structural exposure exists. V1 pool contracts ($51.8M TVL) are NOT deprecated by the protocol and are therefore excluded from this finding.

Sources #

Methodology #

Determine whether contracts marked deprecated by a protocol announcement still hold >$100K in assets.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sunswap factor RD-F-166 score red collected_at 2026-05-17 14:37:31