Deprecated contract paused but pause reversible by live admin

Venus Protocol's assessment for RD-F-167 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Venus has had significant architectural evolution (VBep20 → Diamond Comptroller → Isolated Pools). Enumerating all deprecated contracts with live admin pause power requires full vToken set enumeration — deferred to code-security-analyst. ACM governs current contracts; legacy contracts not assessed within budget.

Sources #

Curator note
Gap: 30+ Core Pool vTokens not individually inspected for deprecated-surface admin scopeFull deprecated contract enumeration deferred to code-security-analystretrieved 2026-04-28

Methodology #

Determine whether a deprecated-and-paused contract's pause state is revertible by a currently-live admin role.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol venus factor RD-F-167 score gray collected_at 2026-04-28 18:30:49