defirisk.co
rubric v1.7.0

ERC-4626 virtual-share offset (OZ ≥4.9)

Maple Finance's assessment for RD-F-074 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Maple pool tokens use custom ERC-4626 implementation (revenue-distribution-token library), not OpenZeppelin. OZ >=4.9 virtual-share offset not used. Protection comes from governor-configurable bootstrapMint, not a code-level OZ virtual constant. Non-OZ custom mitigation present.

Detail #

data-cache github.oz_contracts_version: null. Maple's custom RDT library implements ERC-4626 but uses the bootstrapMint mechanism as the analogous protection. OZ virtual-share offset (introduced in OZ 4.9) is a specific code-level constant that prevents share inflation without governance action. Maple's protection is governance-configurable (not a virtual constant), making it yellow per the rubric (non-OZ custom mitigation).

Sources #

  • Partner feed
    00-data-cache.jsondata-cache github.oz_contracts_version: nullretrieved 2026-04-27
  • GitHub
    Maple Revenue Distribution Tokenmaple-labs/revenue-distribution-token - custom ERC-4626, no OZ virtual offsetretrieved 2026-04-27

Methodology #

Determine whether ERC-4626 vaults use OpenZeppelin ≥4.9 virtual-share offset pattern to prevent first-depositor share-inflation.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol maple-finance factor RD-F-074 score yellow collected_at 2026-04-27 05:38:08