defirisk.co
rubric v1.7.0

Flash loan >$10M targeting protocol tokens

Cap (cUSD / stcUSD)'s assessment for RD-F-100 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

T-09 phase-2 signal. Cap's Lender contract (0x15622c3dbbc5614E6DFa9446603c1779647f01FC) is a borrow pool; Aave V3 flash loans are used by operators as part of the core borrow workflow. Flash-loan targeting at >=10M USD notional interacting with the Oracle or Lender contract would be the fire condition. No known flash-loan exploit event detected via OSINT. Per-block scan not implemented.

Sources #

  • Internal
    Cap protocol profile — Aave V3 flash loan integration.research/protocols/cap/00-profile.md §5 (Aave V3 integration as operator borrow mechanism)retrieved 2026-05-17
  • Etherscan
    Etherscan: Cap Lender (borrow pool)0x15622c3dbbc5614E6DFa9446603c1779647f01FC — Cap Lender contractretrieved 2026-05-17

Methodology #

Detect whether a flash loan >$10M denominated in protocol tokens or LP tokens has originated, likely to interact with this protocol.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol cap factor RD-F-100 score gray collected_at 2026-05-17 10:56:24