First-depositor / share-inflation guard
Ondo Finance's assessment for RD-F-075 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
For Flux Finance cToken markets: no on-chain first-depositor guard exists. Acknowledged out-of-scope in bug bounty. Manual mitigation (team seeds the market) is the only protection. For OUSG/USDY: not applicable (not share-based vaults). For OUSG in Flux as collateral: when fOUSG market was initialized, it appears the team manually seeded it (current balance ~$38.7M); no evidence of exploitation to date. Structural gap remains for any future market listing.
Sources #
- Curator noteExtracted from 04-economic.md — RD-F-075 finding; no URL cited in originalretrieved 2026-04-28
Methodology #
Determine whether the vault has a first-depositor guard (seed deposit on deploy, virtual-share offset, or floor-check).
See the full factor methodology and distribution across all protocols →