First-depositor / share-inflation guard
Compound V3 (Comet)'s assessment for RD-F-075 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Native Comet: structural immunity via index-based accounting (baseSupplyIndex cannot be inflated by donation — updated by time-weighted accrual only). CometWrapper: explicit protection via internal accounting (direct token transfers not recognized). No seed deposit mechanism coded but architecture is immune.
Detail #
Native Comet core contracts: the baseSupplyIndex is initialized at BASE_INDEX_SCALE = 1e15 and is updated only via time-weighted interest accrual formulas, not by asset balance changes. A first depositor's principal = their deposit / 1.0 = their deposit amount exactly. Donating tokens to the Comet contract has no effect on the index or any other user's balance. This is structural immunity, not a guard mechanism. CometWrapper (ERC-4626 layer): maintains internal accounting of tokens deposited/withdrawn exclusively through mint/redeem/deposit/withdraw functions — direct token transfers to the wrapper are not recognized, preventing the classic inflation attack. No on-chain seed deposit found in deployment configuration. Green: protection is structural (native Comet) and explicit (CometWrapper).
Sources #
- GitHubCometWrapper inflation-attack protection documentationCometWrapper: 'To nullify inflation attacks, CometWrapper maintains internal accounting of all Compound III tokens deposited and withdrawn, with this internal accounting only getting updated through the mint, redeem, deposit and withdraw functions'retrieved 2026-04-27
- CometCore.sol principal-index accountingCometCore.sol: presentValue() and principalValue() use baseSupplyIndex updated by accrual only, not balanceOf; BASE_INDEX_SCALE = 1e15retrieved 2026-04-27
- RareSkills Compound V3 contracts tutorialRareSkills Comet architecture: index-based model prevents first-depositor share inflation by designretrieved 2026-04-27
Methodology #
Determine whether the vault has a first-depositor guard (seed deposit on deploy, virtual-share offset, or floor-check).
See the full factor methodology and distribution across all protocols →