Storage-layout collision risk across upgrades
Superstate's assessment for RD-F-142 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Multiple upgrade generations (v1 through v5_1) exist across 4 upgrades in 7 months. OpenZeppelin Upgrades plugin storage-layout analysis was not evidenced in public audit artifacts. SuperstateToken uses Ownable2StepUpgradeable and OZ upgradeable base; additive storage layout maintenance is standard OZ practice but not publicly verified for each version. 0xMacro audits (superstate-5, superstate-6) cover SuperstateToken.sol but do not cite storage layout checks in their public scopes.
Sources #
- EtherscanUSTB Proxy Upgrade History - Multiple Versions4 USTB implementation contracts active sequentially (0xAa9F82, 0xADE87e, 0x3Da1ec, 0x1f50a1EE) with incremental versioning over 7 monthsretrieved 2026-05-16
- 0xMacro Superstate-6 Scope0xMacro superstate-6 scope includes SuperstateToken.sol but storage layout verification not cited in public reportretrieved 2026-05-16
Methodology #
Determine whether the OZ upgrades-plugin or manual review flags a storage-layout collision risk between implementation versions.
See the full factor methodology and distribution across all protocols →