★ Flash-loanable voting weight

Compound V3 (Comet)'s assessment for RD-F-036 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

COMP uses EIP-20 checkpoint delegation. GovernorBravo reads getPriorVotes(account, block.number - 1). Voting weight snapshotted at prior block. Flash loans cannot retroactively inflate prior-block checkpoint balances. Beanstalk-class attack prevented. Proposal 289 used pre-accumulated COMP from Bybit, not flash loans.

Sources #

GitHub
https://github.com/compound-finance/compound-protocol/blob/master/contracts/Governance/GovernorBravoDelegate.solretrieved 2026-04-27
URL
https://www.web3isgoinggreat.com/?id=compound-dao-governance-attackretrieved 2026-04-28
Audit
https://blog.openzeppelin.com/compound-governor-bravo-auditretrieved 2026-04-28

Methodology #

Determine whether governance voting power is a function of current token balance of a transferable token with no lock or checkpoint, making it flash-loan susceptible.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol compound-v3 factor RD-F-036 score green collected_at 2026-04-28 00:20:50