defirisk.co
rubric v1.7.0

ERC-4626 virtual-share offset (OZ ≥4.9)

Lista DAO's assessment for RD-F-074 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

NOT APPLICABLE — MasterVault.sol is NOT an ERC-4626 vault. It inherits OwnableUpgradeable + PausableUpgradeable + ReentrancyGuardUpgradeable but not ERC4626Upgradeable (source confirms a commented-out ERC4626 import). Custom fee-deduction share model only. OZ version in package.json is 4.6.0 (pre-4.9) but irrelevant since ERC-4626 is not implemented. No _decimalsOffset present. Lista Lending vaults use permissionless isolated market architecture, not standard ERC-4626.

Sources #

  • GitHub
    MasterVault.sol — raw GitHub sourceRaw MasterVault.sol source: inherits OwnableUpgradeable + PausableUpgradeable + ReentrancyGuardUpgradeable; no ERC4626Upgradeable in active inheritance; no _decimalsOffset; no convertToShares/convertToAssetsretrieved 2026-05-12
  • GitHub
    lista-dao-contracts package.json — OZ version 4.6.0package.json: @openzeppelin/contracts 4.6.0, @openzeppelin/contracts-upgradeable 4.6.0 — pre-4.9 but ERC-4626 not implementedretrieved 2026-05-12

Methodology #

Determine whether ERC-4626 vaults use OpenZeppelin ≥4.9 virtual-share offset pattern to prevent first-depositor share-inflation.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol lista-dao factor RD-F-074 score gray collected_at 2026-05-12 17:54:05