defirisk.co
rubric v1.7.0

Mixed-decimals math without explicit scaling

Cap (cUSD / stcUSD)'s assessment for RD-F-017 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Protocol handles USDC (6 decimals) as primary asset. Source inspection of VaultLogic.sol and BorrowLogic.sol shows explicit scaling patterns (RAY/WAD normalization). Sherlock competitive audit (47 files, July 2025) would have flagged decimal mismatch. No public finding of this nature disclosed.

Sources #

  • GitHub
    Sherlock Audit Scopesherlock-audit/2025-07-cap — 47 contracts in scope including vault/lender math pathsretrieved 2026-05-17
  • GitHub
    VaultLogic.sol — Decimal ScalingVaultLogic.sol, BorrowLogic.sol — explicit scaling patterns for decimal normalizationretrieved 2026-05-17

Methodology #

Determine whether shared numerator/denominator arithmetic operates over tokens with different decimals without WAD/RAY normalization or explicit decimal-adjustment.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol cap factor RD-F-017 score green collected_at 2026-05-17 10:56:24