defirisk.co
rubric v1.7.0

Flash-loanable voting weight

Orca's assessment for RD-F-036 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

SPL Governance (Realms) requires ORCA token deposit into the governance program before a vote can be cast; tokens are locked in the Voter Token Record for the duration of active proposals. This prevents same-block flash-loan attacks (Beanstalk-style) on voting weight. However, the governance token (ORCA/xORCA) can be accumulated via open-market purchases over multi-day windows without any time-weighted lock requirement. Governance v0 docs confirm 1-ORCA=1-vote model with 7-day voting period. No checkpoint-based snapshotting. Yellow: not flash-loanable within a single tx; open-market accumulation risk over longer windows remains.

Sources #

Methodology #

Determine whether governance voting power is a function of current token balance of a transferable token with no lock or checkpoint, making it flash-loan susceptible.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol orca factor RD-F-036 score yellow collected_at 2026-05-16 02:39:16