defirisk.co
rubric v1.7.0

Empty cToken-style market (zero supply/borrow)

ether.fi's assessment for RD-F-070 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

RD-F-070 (★ critical) — NOT APPLICABLE. ether.fi is not a Compound V2 fork. Per taxonomy PD-024, empty cToken-style market exploit pattern applies only to Compound-fork protocols. ether.fi uses an original EigenPod-per-validator architecture with custom eETH share accounting (not cTokens). The analogous share-inflation risk in eETH was explicitly addressed by Certora formal verification (January 2025: 'eETH share inflation by burn shares'). The ★ critical flag does not trigger.

Sources #

  • Audit
    Certora eETH Share Inflation Formal VerificationCertora audit 2025-01-16 — 'eETH share inflation by burn shares' — github.com/etherfi-protocol/smart-contracts/blob/master/audits/2025.01.16 — Certora — EETH share inflation by burn shares.pdfretrieved 2026-04-28
  • Docs
    ether.fi smart-contracts GitHub repoether.fi profile §5 — 'Not forked / original'; GitHub repo shows no fork relationshipretrieved 2026-04-28

Methodology #

Determine whether any listed Compound V2-fork market has `totalSupply == 0` and `totalBorrow == 0`, the precondition for a donation-exploit.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol ether-fi factor RD-F-070 score not_applicable collected_at 2026-04-28 13:58:46