LP token balanceOf used for pricing
Kamino Lend's assessment for RD-F-061 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
kToken pricing derived from on-chain AMM pool state (pool reserves/liquidity math) via Scope DEX oracle types — NOT from balanceOf of LP tokens. Not donation-manipulable via direct transfer.
Detail #
Scope OrcaWhirlpool, RaydiumAMMV3, MeteoraLMMM oracle types read the DEX pool's state (reserves, liquidity amounts, price ticks) to derive LP value. This is distinct from the donation attack pattern where pricing is derived from a simple `balanceOf` call on a vault or pool contract that can be inflated by direct token transfers. The DEX pool pricing does have its own manipulation surface (pool mechanics), but not the specific donation/balanceOf vulnerability class.
Sources #
- GitHubScope DEX oracle typesScope oracles/mod.rs — OrcaWhirlpool, RaydiumAMMV3, MeteoraLMMM oracle types (pool-state-derived, not balanceOf)retrieved 2026-04-27
Methodology #
Determine whether protocol pricing is derived from the `balanceOf` of LP tokens in a contract (manipulable by direct token transfer / donation).
See the full factor methodology and distribution across all protocols →