Divide-before-multiply pattern

Centrifuge's assessment for RD-F-016 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Slither not run locally. Centrifuge uses proprietary MathLib for decimal arithmetic. Multiple audits reviewed arithmetic paths. Tinlake v0.3.0 Least Authority audit noted rounding concerns in epoch calculations (deprecated). No public report of divide-before-multiply finding in V3/V3.1 across 22+ audits. Marked yellow for absence of local Slither run.

Sources #

GitHub
https://github.com/centrifuge/protocol/blob/main/src/miscretrieved 2026-04-27
Audit
https://leastauthority.com/static/publications/LeastAuthority_Centrifuge_Tinlake_0.3.0_Audit_Report.pdfretrieved 2026-04-27

Methodology #

Determine whether Slither's `divide-before-multiply` detector fires on the deployed verified source.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol centrifuge factor RD-F-016 score yellow collected_at 2026-04-30 21:19:10