defirisk.co
rubric v1.7.0

First-depositor / share-inflation guard

Cap (cUSD / stcUSD)'s assessment for RD-F-075 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Confirmed: Cap seeds the stcUSD vault with 1 wei at deployment, as documented in the Sherlock audit README (known design choice). The 1-wei dead shares mechanism prevents first-depositor share-inflation attacks by ensuring totalSupply > 0 before any user deposit. Combined with OZ v5.2.0 ERC-4626 base (which includes virtual-asset/share accounting), this is adequate first-depositor protection.

Sources #

Methodology #

Determine whether the vault has a first-depositor guard (seed deposit on deploy, virtual-share offset, or floor-check).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol cap factor RD-F-075 score green collected_at 2026-05-17 10:56:24