defirisk.co
rubric v1.7.0

First-depositor / share-inflation guard

Chainlink CCIP's assessment for RD-F-075 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Not applicable — lending-only factor per PD-024 resolution. No share-based vault, no first-depositor inflation attack surface. CCIP token pools do not use share pricing and have no first-depositor share-inflation vulnerability by architecture.

Sources #

  • Docs
    CCIP Architecture | Chainlink DocumentationCCIP token pool model — no share-based vault, no first-depositor attack surfaceretrieved 2026-05-16
  • Internal
    03-taxonomy.md Cat 4 PD-024 noteTaxonomy 03-taxonomy.md §Category 4 PD-024 resolution — F075 lending-only factor; CCIP has no share accountingretrieved 2026-05-16

Methodology #

Determine whether the vault has a first-depositor guard (seed deposit on deploy, virtual-share offset, or floor-check).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol chainlink-ccip factor RD-F-075 score not_applicable collected_at 2026-05-16 01:55:09