defirisk.co
rubric v1.7.0

LP token balanceOf used for pricing

Curve Finance's assessment for RD-F-061 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Curve does not trust LP token balanceOf for pricing. AMM invariant math (D value) is used, not balanceOf directly. StableSwap-NG: _stored_rates() returns a rate multiplier (not balanceOf) that scales the normalized balances (xp); direct donation via transfer cannot manipulate this rate path. CryptoSwap v2: uses virtual balances derived from pool state, not raw balanceOf. Donation-manipulation via transfer is not applicable to the pricing mechanism.

Sources #

  • GitHub
    Curve StableSwap-NG main contractCurveStableSwapNG.vy _stored_rates(): returns rate multiplier, xp computed as rate * balance — not raw balanceOf for pricingretrieved 2026-04-28

Methodology #

Determine whether protocol pricing is derived from the `balanceOf` of LP tokens in a contract (manipulable by direct token transfer / donation).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol curve-v2 factor RD-F-061 score green collected_at 2026-04-28 19:48:40