defirisk.co
rubric v1.7.0

Empty cToken-style market (zero supply/borrow)

Save (formerly Solend)'s assessment for RD-F-070 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Save is a fork of Solana Labs spl-token-lending, NOT a Compound V2 cToken fork. The taxonomy explicitly scopes RD-F-070 as 'Compound-fork-only'. The spl-token-lending reserve model uses INITIAL_COLLATERAL_RATE constant when mint_total_supply==0, preventing donation-based exchange-rate manipulation at the zero-supply path. The Compound V2 empty-cToken vector does not apply to this reserve model structure.

Sources #

  • Internal
    Save protocol profile §5 — fork lineage00-profile.md §5: fork lineage = spl-token-lending (Solana Labs), NOT Compound cTokenretrieved 2026-05-17
  • URL
    Save (Solend) spl-token-lending reserve.rs — GitHubGitHub solendprotocol/solana-program-library reserve.rs: 'let rate = if self.mint_total_supply == 0 || total_liquidity == Decimal::zero() { Rate::from_scaled_val(INITIAL_COLLATERAL_RATE)' — fixed constant at zero supplyretrieved 2026-05-17

Methodology #

Determine whether any listed Compound V2-fork market has `totalSupply == 0` and `totalBorrow == 0`, the precondition for a donation-exploit.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol save factor RD-F-070 score not_applicable collected_at 2026-05-17 15:20:15