defirisk.co
rubric v1.7.0

Empty cToken-style market (zero supply/borrow)

Liquid Collective (LsETH)'s assessment for RD-F-070 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

[STAR CRITICAL — NOT_APPLICABLE] Liquid Collective is not a Compound V2 fork and has no cToken-style market-listing mechanism. The River contract (0x8c1BEd5b9a0928467c9B1341Da1D7BD5e10b6549) implements a single-asset staking pool with no listed markets, no borrow function, and no totalSupply-per-market accounting susceptible to the empty-market donation attack. The 'cToken model' label in LsETH documentation refers only to the non-rebasing exchange-rate accounting approach (conversion rate = totalETHSupply / totalLsETHSupply), not to any Compound V2 market architecture. Profile §5 confirms: original codebase, not forked from any protocol. Per PD-024 protocol_type_applicability (Compound-fork-only subset), F070 is not_applicable. The star critical flag does not fire.

Sources #

Methodology #

Determine whether any listed Compound V2-fork market has `totalSupply == 0` and `totalBorrow == 0`, the precondition for a donation-exploit.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol liquid-collective factor RD-F-070 score not_applicable collected_at 2026-05-16 19:46:23