First-depositor / share-inflation guard
Dolomite's assessment for RD-F-075 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No first-depositor seed deposit, dead-share burn, or virtual-share offset guard found in DolomiteERC4626. Convertibility uses weiToPar/parToWei via Dolomite's interest index. No explicit minimum-deposit floor enforced in the dToken layer. The index-based Par/Wei accounting differs structurally from the canonical cToken inflation attack: an attacker cannot inflate share price by simply donating tokens because accounting tracks index-adjusted principal, not raw balance ratio. However, the interaction between dToken ERC-4626 share accounting and Dolomite's Par/Wei index during the very first deposit of a new market has not been fully validated by available audit evidence covering the dToken layer. Cyfrin 2023-08 covers DolomiteMargin core; Guardian 2024-01 covers modules. A specific first-deposit path audit of the dToken layer is not confirmed in available audit scope. Conservatively yellow.
Sources #
- GitHubDolomiteERC4626.sol - First Depositor Path InspectionDolomiteERC4626.sol: no dead-share burn at initialization, no minimum deposit floor, no virtual offset; share conversion is weiToPar/parToWei via interest indexretrieved 2026-05-16
- Cyfrin Audit 2023-08-23 - DolomiteMarginCyfrin 2023-08-23 audit covers core DolomiteMargin contracts; Guardian 2024-01-11 audit covers modules (2 Critical, 4 High, 13 Medium found and remediated) - neither explicitly covers dToken ERC-4626 first-deposit path per available audit scope summariesretrieved 2026-05-16
Methodology #
Determine whether the vault has a first-depositor guard (seed deposit on deploy, virtual-share offset, or floor-check).
See the full factor methodology and distribution across all protocols →