defirisk.co
rubric v1.7.0

Empty cToken-style market (zero supply/borrow)

Pendle Finance's assessment for RD-F-070 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

[★ CRITICAL — NOT APPLICABLE] Pendle is not a Compound V2 fork and has no cToken-style markets. The empty-cToken-market donation exploit pattern does not apply. First-depositor protection for LP markets is implemented via MINIMUM_LIQUIDITY = 10^3 (1000 LP tokens) locked at first deposit in MarketMathCore.sol — following the Uniswap V2 dead-shares pattern. No PT/YT/LP share-based accounting creates the cToken-style share-inflation vector. Profile confirms original implementation, not a fork. Taxonomy explicitly designates RD-F-070 as 'Compound-fork-only.' Pendle-specific counterparty analog (PT redemption risk if SY underlying depegs) is noted in narrative but does not trigger this factor.

Sources #

  • GitHub
    MarketMathCore.sol — MINIMUM_LIQUIDITY = 10^3pendle-core-v2-public/contracts/core/Market/MarketMathCore.sol — MINIMUM_LIQUIDITY = 10**3 constant; addLiquidityCore: lpToReserve = MINIMUM_LIQUIDITY when totalLp == 0retrieved 2026-04-29
  • Internal
    Pendle Protocol Profile §5 — Fork lineageProfile §5: Not forked / original implementation — Pendle V2 is an original protocol designretrieved 2026-04-29
  • URL
    MixBytes — Yield Tokenization Protocols: PendleMixBytes analysis confirming MINIMUM_LIQUIDITY reserve mechanism in SY/LP layerretrieved 2026-04-29

Methodology #

Determine whether any listed Compound V2-fork market has `totalSupply == 0` and `totalBorrow == 0`, the precondition for a donation-exploit.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol pendle factor RD-F-070 score not_applicable collected_at 2026-04-28 21:09:40