Dependency graph (protocols depended upon)
Concrete's assessment for RD-F-050 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Concrete is critically dependent on external yield strategy protocols: Aave v3, Compound v3, Morpho Blue, Silo Finance, Radiant Capital. These protocols hold the capital allocated by Concrete vaults. AllocateModule calls IStrategyTemplate.allocateFunds() / deallocateFunds() on strategy adapters that interact with these external protocols. If any strategy protocol is exploited or becomes insolvent, Concrete vault NAV is reduced proportionally to that strategy's allocation weight. Halborn V2 audit (Sep 2025) flagged 'Strategy removal allowed while holding allocated funds' as a Low finding (Risk Accepted), confirming no automatic exit on strategy failure. ~$990M TVS exposed.
Sources #
- GitHubAllocateModule.sol — external strategy protocol callssrc/module/AllocateModule.sol — IStrategyTemplate(params[i].strategy).allocateFunds(extraData) and deallocateFunds(extraData) callsretrieved 2026-05-17
- Halborn Blueprint Finance Earn V2 Core — Standard Implementation Audit (Sep 2025)Halborn Earn V2 Core audit Sep 2025 — Finding: 'Strategy removal allowed while holding allocated funds' (Low, Risk Accepted) — confirms no automatic exit on strategy failureretrieved 2026-05-17
Methodology #
List all external protocols whose failure would directly impair this protocol (LST providers, bridges, stablecoin issuers, keepers).
See the full factor methodology and distribution across all protocols →