Deprecated contract paused but pause reversible by live admin
Veda (BoringVault)'s assessment for RD-F-167 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
The 'old Teller' 0x5c135e8eC99557b412b9B4492510dCfBD36066F5 is listed as 'still active' in ether.fi documentation rather than formally deprecated/sunset. Admin (now the 3-of-5 Safe via TimelockController) retains control over all active contracts including old Teller. If still operational, this is a concurrent attack surface.
Sources #
- Docsether.fi Liquid ETH Yield Vault docs — old Teller still activeether.fi gitbook ETH Yield Vault page: 'Old Teller (still active): 0x5c135e8eC99557b412b9B4492510dCfBD36066F5'retrieved 2026-05-17
Methodology #
Determine whether a deprecated-and-paused contract's pause state is revertible by a currently-live admin role.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol veda factor RD-F-167 score yellow collected_at 2026-05-17 12:41:22