defirisk.co
rubric v1.7.0

Empty cToken-style market (zero supply/borrow)

Marinade Finance's assessment for RD-F-070 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

RD-F-070 (empty cToken-style market, Compound V2 fork exploit pattern) is not applicable to Marinade. Marinade is a Solana BPF stake-pool protocol, not a Compound V2 fork. The empty-market donation-attack requires: (1) a Compound-fork market registry where a market can exist with zero totalSupply/totalBorrow, and (2) a cToken exchange rate computed from donated asset balance. Marinade uses a fundamentally different accounting: price of mSOL = total_staked_SOL / total_mSOL_supply, updated per epoch from on-chain validator rewards. No cToken-style market can be listed on Marinade, and the mSOL exchange rate is not manipulable by direct asset donation. Taxonomy explicitly restricts this factor to Compound-fork protocols (§Category 4 PD-024: Compound-fork-only subset). Context brief confirms: F070 = not_applicable for Marinade.

Sources #

  • Docs
    Marinade Documentation — What is mSOL (exchange rate mechanism)Marinade docs — mSOL exchange rate formula: price of mSOL = total_staked / tokens_minted; epoch-based update from on-chain validator rewards; no cToken market registryretrieved 2026-05-16
  • Internal
    Taxonomy §Category 4 PD-024 resolution (RD-F-070 Compound-fork-only)03-taxonomy.md §Category 4 PD-024 resolution: RD-F-070 Compound-fork-only, not_applicable for non-Compound-fork protocolsretrieved 2026-05-16
  • GitHub
    Marinade Finance — Liquid Staking Program (GitHub)marinade-finance/liquid-staking-program — Anchor BPF Rust program; no Compound-fork market structure; stake-pool-based accounting distinct from cToken patternretrieved 2026-05-16

Methodology #

Determine whether any listed Compound V2-fork market has `totalSupply == 0` and `totalBorrow == 0`, the precondition for a donation-exploit.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol marinade factor RD-F-070 score not_applicable collected_at 2026-05-16 08:48:35