defirisk.co
rubric v1.7.0

Mixed-decimals math without explicit scaling

crvUSD (Curve Stablecoin)'s assessment for RD-F-017 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Static analysis for mixed-decimals arithmetic (Slither PH) cannot run on Vyper. WBTC (8 decimals) vs 18-decimal tokens requires scaling in AMM math; audits reviewed this but tool output is unavailable.

Sources #

  • Internal
    M3a Process-Learnings: Vyper templateprocess-learnings.md Vyper template — Slither not applicable to Vyperretrieved 2026-05-16

Methodology #

Determine whether shared numerator/denominator arithmetic operates over tokens with different decimals without WAD/RAY normalization or explicit decimal-adjustment.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol crvusd factor RD-F-017 score gray collected_at 2026-05-16 19:09:40