defirisk.co
rubric v1.7.0

Mixed-decimals math without explicit scaling

Sushi (SushiSwap) — v2 + v3 + Trident + BentoBox/Kashi + SushiXSwap's assessment for RD-F-017 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No Slither/manual source review output for SushiSwap's deployed contracts. v2 constant-product formula and v3 tick math (Q64.96 fixed-point) are well-studied upstreams. No specific SushiSwap-sourced finding for mixed-decimal math without scaling in available published analyses. Tool run required for definitive assessment.

Sources #

  • GitHub
    sushiswap/v3-core GitHub reposushiswap/v3-core (Q64.96 tick math inherited from Uniswap v3 — avoids decimal normalization in core math)retrieved 2026-05-17
  • Internal
    00-data-cache.json — static_analysis sectiondata-cache static_analysis: [] (empty)retrieved 2026-05-17

Methodology #

Determine whether shared numerator/denominator arithmetic operates over tokens with different decimals without WAD/RAY normalization or explicit decimal-adjustment.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sushi factor RD-F-017 score gray collected_at 2026-05-16 19:50:37