ERC-4626 virtual-share offset (OZ ≥4.9)
Spark Protocol's assessment for RD-F-074 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
sUSDS has no virtual-share offset (_decimalsOffset() returns 0). EIP-4626 inflation attack vector on empty vault initialization is unmitigated at the contract level. High-severity design gap in the savings module.
Sources #
- GitHubhttps://github.com/makerdao/sdai/blob/susds/src/SUsds.solretrieved 2026-04-21
Methodology #
Determine whether ERC-4626 vaults use OpenZeppelin ≥4.9 virtual-share offset pattern to prevent first-depositor share-inflation.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol spark factor RD-F-074 score red collected_at 2026-04-27 01:00:42