ERC-4626 virtual-share offset (OZ ≥4.9)

dYdX v4 (dYdX Chain)'s assessment for RD-F-074 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

MegaVault is a Cosmos-native x/vault module on the dYdX appchain — it is NOT an ERC-4626 contract. No EVM share-accounting exists anywhere in the dYdX v4 protocol. The ERC-4626 virtual-share-offset attack vector requires EVM-based share arithmetic (OpenZeppelin >=4.9 virtual shares). Per PD-024 (Cosmos-native-not-ERC-4626 rationale). No gap_reason required.

Sources #

Internal
dYdX v4 profile — §3 deployments, §11 flags.research/protocols/dydx-v4/00-profile.md §3 and §11 — MegaVault is Cosmos-native module, F074 N/A; non_evm_substrate: trueretrieved 2026-05-17
Docs
MegaVault — dYdX Community DocumentationMegaVault documentation — Cosmos-native architecture, no ERC-4626retrieved 2026-05-17

Methodology #

Determine whether ERC-4626 vaults use OpenZeppelin ≥4.9 virtual-share offset pattern to prevent first-depositor share-inflation.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol dydx-v4 factor RD-F-074 score not_applicable collected_at 2026-05-17 09:58:47