Divide-before-multiply pattern
Across Protocol's assessment for RD-F-016 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No Slither `divide-before-multiply` tool output available (T-10 dry run). The Aug 2024 critical finding was a decimal scaling issue (off-by-factor of 10^12 in the Arbitrum CustomGasToken adapter) which is semantically adjacent — but it was in a fee calculation, not a price/accounting path for user funds, and was resolved pre-deployment. No ongoing divide-before-multiply in price paths identified in audit summaries.
Sources #
- URLhttps://www.openzeppelin.com/news/across-protocol-diff-auditretrieved 2026-04-28
Methodology #
Determine whether Slither's `divide-before-multiply` detector fires on the deployed verified source.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol across-protocol factor RD-F-016 score yellow collected_at 2026-04-30 21:19:18