ERC-4626 virtual-share offset (OZ ≥4.9)
Dolomite's assessment for RD-F-074 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
dTokens are confirmed ERC-4626 vault tokens per docs.dolomite.io/developer-documentation/dolomite-margin-dtokens. DolomiteERC4626.sol (packages/base/contracts/general/DolomiteERC4626.sol) does NOT implement _decimalsOffset(). Inheritance chain: IDolomiteERC4626, Initializable, ProxyContractHelpers, ReentrancyGuardUpgradeable, OnlyDolomiteMargin - no OpenZeppelin ERC4626 base. GitHub search for decimalsOffset in dolomite-margin-modules returns 0 results (confirmed 2026-05-16). No virtual-share offset protection is present. Share conversion uses Dolomite's Par/Wei interest-index mechanism (weiToPar / parToWei). The index-based accounting differs from a naive totalAssets/totalSupply ratio and provides some structural mitigation vs canonical ERC-4626 inflation. Scored yellow rather than red: confirmed gap in explicit OZ >= 4.9 protection; architectural differences from canonical vulnerable pattern warrant further audit-level investigation before red designation.
Sources #
- GitHubDolomiteERC4626.sol - Source InspectionDolomiteERC4626.sol inspected: no _decimalsOffset() function; inheritance chain is IDolomiteERC4626+Initializable+ProxyContractHelpers+ReentrancyGuardUpgradeable+OnlyDolomiteMargin; share conversion via Par/Wei index not virtual-offsetretrieved 2026-05-16
- Dolomite dTokens DocumentationdTokens are ERC-4626 vault tokens wrapping Dolomite balance; Par balance = shares; Wei balance = assets redeemable; created for specific markets needing ERC-4626 for integrationsretrieved 2026-05-16
Methodology #
Determine whether ERC-4626 vaults use OpenZeppelin ≥4.9 virtual-share offset pattern to prevent first-depositor share-inflation.
See the full factor methodology and distribution across all protocols →