★ Empty cToken-style market (zero supply/borrow)
Compound V3 (Comet)'s assessment for RD-F-070 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Not applicable — Compound V3 is not a Compound V2-style fork. No cToken share accounting exists. Index-based model (baseSupplyIndex/baseBorrowIndex) cannot be manipulated by donation. Taxonomy marks this factor 'Compound-fork-only: N/A for non-fork protocols.' No critical flag fires.
Detail #
Compound V3 (Comet) is a complete rewrite, not a fork of Compound V2. It does not use cToken architecture (no cTokens, no cToken exchange rate, no mint/redeem receipt tokens). The accounting model is index-based: each user's position is stored as a principal value; interest accrues by updating baseSupplyIndex via time-weighted formula. The index starts at BASE_INDEX_SCALE = 1e15 and is only modified by accrual — not by asset donations. A first depositor cannot inflate the index by sending tokens to the contract. Taxonomy §Category 4 explicitly states RD-F-070 is 'Compound-fork-only (subset of lending-only): N/A for non-Compound-fork protocols.' The ERC-4626 sub-bucket (F074, F075) is assessed separately. Gray is the correct score per taxonomy rules.
Sources #
- InternalProtocol profile §5 fork lineageProfile §5: Compound V3 is a complete rewrite by Compound Labs; empty-cToken-market vulnerability pattern from V2 does not apply to Cometretrieved 2026-04-27
- Taxonomy Cat 4 sub-bucket classificationTaxonomy §Category 4: RD-F-070 is Compound-fork-only (N/A for non-Compound-fork protocols)retrieved 2026-04-27
- CometCore.sol sourceCometCore.sol: index-based principal accounting; BASE_INDEX_SCALE; no cToken mint/redeemretrieved 2026-04-27
Methodology #
Determine whether any listed Compound V2-fork market has `totalSupply == 0` and `totalBorrow == 0`, the precondition for a donation-exploit.
See the full factor methodology and distribution across all protocols →