ERC-4626 virtual-share offset (OZ ≥4.9)

Chainlink CCIP's assessment for RD-F-074 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Not applicable — lending-only factor per PD-024 resolution. CCIP token pools are not ERC-4626 vaults; no share accounting or virtual-offset pattern applies. Lock/burn/mint/unlock model has no share price formula susceptible to virtual-share attacks.

Sources #

Internal
03-taxonomy.md Cat 4 PD-024 noteTaxonomy 03-taxonomy.md §Category 4 PD-024 resolution — F074 lending-only factor; CCIP architecture is not ERC-4626retrieved 2026-05-16
Docs
CCIP Architecture | Chainlink DocumentationCCIP architecture — token pool lock/burn/mint/unlock model, no ERC-4626 vaultretrieved 2026-05-16

Methodology #

Determine whether ERC-4626 vaults use OpenZeppelin ≥4.9 virtual-share offset pattern to prevent first-depositor share-inflation.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol chainlink-ccip factor RD-F-074 score not_applicable collected_at 2026-05-16 01:55:09