Divide-before-multiply pattern
Convex Finance's assessment for RD-F-016 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
CVX token (Cvx.sol) uses a cliff-based emission formula involving division operations. Source inspection suggests potential divide-before-multiply in the cliff reduction calculation. No Slither tool run performed to confirm. Conservative yellow assigned pending tool run. SafeMath is used throughout (0.6.12), which serializes arithmetic operations and may prevent but does not guarantee absence of divide-before-multiply in the original logic ordering.
Sources #
- GitHubConvex Cvx.sol (cliff-based emission formula, potential divide-before-multiply)Cvx.sol mint calculation with cliff reductionretrieved 2026-05-16
Methodology #
Determine whether Slither's `divide-before-multiply` detector fires on the deployed verified source.
See the full factor methodology and distribution across all protocols →