SELFDESTRUCT reachable from non-admin path

Cap (cUSD / stcUSD)'s assessment for RD-F-011 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No SELFDESTRUCT opcode found in any inspected contract (CapToken.sol, Vault.sol, Lender.sol, StakedCap.sol, AccessControl.sol, OFTLockboxUpgradeable.sol, EigenAgentManager.sol, SymbioticNetworkMiddleware.sol). Solidity 0.8.28 replaces SELFDESTRUCT with SENDALL semantics (EIP-6780) — the destructive behavior is not available in normal contract calls.

Sources #

GitHub
CapToken.sol — No SELFDESTRUCTcontracts/token/CapToken.sol — no selfdestructretrieved 2026-05-17
GitHub
Vault.sol — No SELFDESTRUCTcontracts/vault/Vault.sol — no selfdestructretrieved 2026-05-17

Methodology #

Determine whether any deployed contract contains the SELFDESTRUCT opcode in a code path reachable from a non-admin caller.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol cap factor RD-F-011 score green collected_at 2026-05-17 10:56:24