★ Flash-loanable voting weight
Frax Finance's assessment for RD-F-036 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
veFXS is non-transferable and requires locking FXS for up to 4 years. Voting power uses checkpoint-based historical tracking (veFXS.totalSupplyAt(block.number)). Flash loans cannot acquire or inflate veFXS within a single block. The Beanstalk-class governance flash-loan attack is structurally blocked by the lock mechanism.
Sources #
- AuditfrxGov Security Review — Trail of Bits 2023Trail of Bits frxGov audit 2023-07 — audited veFXS voting mechanismretrieved 2026-05-17
- veFXS | Frax FinanceFrax veFXS docs: non-transferable; staking 1 FXS for 4 years = 4 veFXS; checkpoint mechanismretrieved 2026-05-17
- Frax Finance: veFXS Token | EtherscanveFXS contract 0xc8418aF6358FFdda74e09Ca9CC3Fe03Ca6adc5b0 — CRV-style vote escrowretrieved 2026-05-17
Methodology #
Determine whether governance voting power is a function of current token balance of a transferable token with no lock or checkpoint, making it flash-loan susceptible.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol frax factor RD-F-036 score green collected_at 2026-05-16 20:44:31