defirisk.co
rubric v1.7.0

Storage-layout collision risk across upgrades

Curve Finance's assessment for RD-F-142 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Pool contracts are immutable Vyper — no proxy upgrades, so no storage-layout collision risk for pools. Aragon Voting Apps use AppProxyUpgradeable (Aragon OS) but app-logic upgrades are governance-controlled. NG factory blueprint upgrades create new implementation slots, not in-place storage overwrites. Collision risk is very low by design.

Sources #

Methodology #

Determine whether the OZ upgrades-plugin or manual review flags a storage-layout collision risk between implementation versions.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol curve-v2 factor RD-F-142 score green collected_at 2026-04-28 19:48:40