defirisk.co
rubric v1.7.0

ecrecover zero-address return unchecked

Multipli's assessment for RD-F-019 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No ecrecover calls found in MultipliVault, VaultFundManager, VariableVaultFee, or RolesAuthority. EIP-2612 permit-style functionality not implemented. Factor effectively N/A but scored green (no vulnerability present).

Sources #

Methodology #

Determine whether any `ecrecover` call result is used without a `!= address(0)` guard.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol multipli factor RD-F-019 score green collected_at 2026-05-17 11:48:35