LP token balanceOf used for pricing
Save (formerly Solend)'s assessment for RD-F-061 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No evidence that Save uses LP token balanceOf for pricing. All pricing goes through Pyth oracle reads (pyth_oracle_pubkey per reserve) or Switchboard reads (switchboard_oracle_pubkey). The Solana BPF program architecture for token-lending does not use LP token balanceOf donation-attack vectors. processor.rs price computation exclusively uses get_pyth_price() and get_switchboard_price(), not any pool balance reads.
Sources #
- GitHubSolend processor.rs — no LP token balanceOf pricingprocessor.rs — price computation in get_price() uses only Pyth and Switchboard reads; no LP token balanceOf callsretrieved 2026-05-17
Methodology #
Determine whether protocol pricing is derived from the `balanceOf` of LP tokens in a contract (manipulable by direct token transfer / donation).
See the full factor methodology and distribution across all protocols →