Flash loan >$10M targeting protocol tokens

Hyperlane's assessment for RD-F-100 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Hyperlane has no on-chain Governor contract (governance.governor_address=null) and no lending/borrowing surface (borrow.present=false per data cache). Flash loans cannot attack Hyperlane governance (no Governor exists) or create an exploitable oracle/governance manipulation loop. The open ERC4626 insolvency vulnerability (issue #8589) operates via normal protocol interaction, not via flash loan. Not applicable in the standard flash-loan-attacks-protocol framing.

Sources #

Internal
Hyperlane Data Cache Governance and Borrow00-data-cache.json sources.governance.governor_address=null; sources.borrow.present=falseretrieved 2026-05-17

Methodology #

Detect whether a flash loan >$10M denominated in protocol tokens or LP tokens has originated, likely to interact with this protocol.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol hyperlane factor RD-F-100 score not_applicable collected_at 2026-05-16 23:03:56