Storage-layout collision risk across upgrades

crvUSD (Curve Stablecoin)'s assessment for RD-F-142 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Not applicable: crvUSD contracts are non-upgradeable Vyper blueprints. Storage layout collision is a Solidity proxy-upgrade concern. No storage migrations occur in this system.

Sources #

URL
Curve Finance Core Mechanics (Zealynx Security)Curve does not use proxy contracts for its designs; blueprint pattern avoids storage layout collision riskretrieved 2026-05-16

Methodology #

Determine whether the OZ upgrades-plugin or manual review flags a storage-layout collision risk between implementation versions.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol crvusd factor RD-F-142 score not_applicable collected_at 2026-05-16 19:09:40