defirisk.co
rubric v1.7.0

Divide-before-multiply pattern

Beefy Finance's assessment for RD-F-016 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Core vault share math uses multiply-before-divide pattern (correct). No divide-before-multiply found in vault source. Cyfrin CLM audit noted token accumulation from rounding during division in CLM strategies — adjacent indicator. Strategy contracts (hundreds) not individually checked via Slither. Yellow pending tool run on strategy layer.

Sources #

  • Audit
    Cyfrin CLM Audit 2024-04-06Cyfrin CLM audit 2024-04-06 — tokens accumulate in contract from rounding during division (medium finding)retrieved 2026-05-16
  • GitHub
    BeefyVaultV7.solBeefyVaultV7.sol — share math: depositAmount * totalSupply() / balance() (correct order)retrieved 2026-05-16

Methodology #

Determine whether Slither's `divide-before-multiply` detector fires on the deployed verified source.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol beefy factor RD-F-016 score yellow collected_at 2026-05-16 13:10:30