defirisk.co
rubric v1.7.0

Empty cToken-style market (zero supply/borrow)

Orca's assessment for RD-F-070 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

RD-F-070 ★ CRITICAL — not_applicable. Orca Whirlpools is an original open-source Anchor/Rust CLMM on Solana; it is NOT a Compound V2 fork and has NO cToken-style market accounting, no totalSupply/totalBorrow market state, and no borrow-enable lifecycle. The donation-exploit vector (zero-supply cToken market + direct token donation inflating exchange rate) has no structural analog in Whirlpools' reserve-based pool accounting. Pre-marked not_applicable in the phase-2 briefing and consistent with PD-024 Compound-fork-only designation in the taxonomy.

Sources #

  • GitHub
    Orca Whirlpools GitHub repo (no FV spec directory found)https://github.com/orca-so/whirlpoolsretrieved 2026-05-16
  • Partner feed
    DefiLlama cache: lending_protocol=false confirms no cToken market structureDefiLlama API cache — orca — borrow.present=false; lending_protocol=falseretrieved 2026-05-16

Methodology #

Determine whether any listed Compound V2-fork market has `totalSupply == 0` and `totalBorrow == 0`, the precondition for a donation-exploit.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol orca factor RD-F-070 score not_applicable collected_at 2026-05-16 02:39:16