Solc version used (known-bug versions flagged)
Veda (BoringVault)'s assessment for RD-F-170 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Solidity 0.8.21 (v0.8.21+commit.d9974bed) used across all deployed contracts — confirmed from foundry.toml (auto_detect_solc = false, explicit pin) and Etherscan verification of liquidETH BoringVault and LayerZeroTeller. 0.8.21 is not on the known-bug list for high/critical bugs affecting ERC-20, Auth, or vault patterns. evm_version = cancun (supports EIP-1153 transient storage but contracts don't appear to use TSTORE/TLOAD). Stable production release.
Sources #
- EtherscanBoringVault liquidETH — Etherscan compiler metadata0xf0bb20865277abd641a307ece5ee04e79073416c — compiler v0.8.21+commit.d9974bed, optimization Yes 200 runsretrieved 2026-05-17
- boring-vault foundry.toml — compiler configurationfoundry.toml: solc_version = '0.8.21', auto_detect_solc = false, evm_version = 'cancun', optimizer = true, optimizer_runs = 200retrieved 2026-05-17
Methodology #
Identify the Solidity compiler version used for deployed bytecode and flag if it appears on the known-bug list (solc bugs.json or Vyper 0.2.15–0.3.0 range).
See the full factor methodology and distribution across all protocols →