defirisk.co
rubric v1.7.0

Empty cToken-style market (zero supply/borrow)

Circle USYC's assessment for RD-F-070 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

RD-F-070 is Compound-fork-only per PD-024 taxonomy note. USYC is a permissioned tokenized money-market fund token, not a Compound V2 fork. There are no cToken-style markets, no totalSupply/totalBorrow slots, no donation-attack surface, and no share-based vault accounting. Process-learnings BUIDL precedent (line ~691) explicitly confirms F070 not_applicable for permissioned RWA tokens.

Sources #

  • Internal
    PD-024 + process-learnings BUIDL precedent - F070 not_applicable for RWA03-taxonomy.md Category 4: RD-F-070 designated Compound-fork-only, N/A for non-Compound-fork protocols; process-learnings.md ~L691 BUIDL critical-factor audit: F036/F039/F070/F151/F154 unambiguously not_applicable for permissioned RWA tokenretrieved 2026-05-16
  • URL
    USYC documentation homepage - protocol type confirmationUSYC is identified as RWA tokenized money-market fund with no fork lineage from Compound or any DeFi lending protocolretrieved 2026-05-16

Methodology #

Determine whether any listed Compound V2-fork market has `totalSupply == 0` and `totalBorrow == 0`, the precondition for a donation-exploit.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol circle-usyc factor RD-F-070 score not_applicable collected_at 2026-05-15 21:56:43