ERC-4626 virtual-share offset (OZ ≥4.9)
Compound V3 (Comet)'s assessment for RD-F-074 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Native Comet contracts do not implement ERC-4626. CometWrapper implements ERC-4626 with custom internal-accounting inflation protection (functionally equivalent to OZ >=4.9 virtual shares). Core protocol not an ERC-4626 vault.
Detail #
Comet.sol, CometExt.sol, CometCore.sol do not inherit from or implement ERC-4626. The optional CometWrapper contract (compound-finance/comet-wrapper) implements ERC-4626 and ERC-7246, using internal accounting to prevent share-inflation attacks by isolating direct token transfers from recognized deposits. OZ v4.8.3 is used in the main comet repo (below v4.9 threshold for automatic virtual shares), but this is immaterial since core contracts are not ERC-4626 vaults. Factor not applicable to native Comet contracts.
Sources #
- GitHubComet.sol sourcedata cache: oz_contracts_version 4.8.3 (comet repo); no ERC-4626 inheritance in Comet.solretrieved 2026-04-27
- CometWrapper GitHub repositorycompound-finance/comet-wrapper: implements ERC-4626; uses internal accounting to nullify inflation attacksretrieved 2026-04-27
Methodology #
Determine whether ERC-4626 vaults use OpenZeppelin ≥4.9 virtual-share offset pattern to prevent first-depositor share-inflation.
See the full factor methodology and distribution across all protocols →