Mixed-decimals math without explicit scaling
Kinetiq's assessment for RD-F-017 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
StakingAccountant _getExchangeRatio() handles 8-to-18 decimal normalization for HYPE values. Code4rena H-03 (exchange ratio inflation via receive()) was acknowledged. Without static analysis of current post-April-2026 implementation this cannot be fully confirmed clean.
Sources #
- GitHubStakingAccountant.solStakingAccountant.sol — decimal handling in exchange ratio computationretrieved 2026-05-17
- Code4rena Kinetiq Audit April 2025Code4rena April 2025 report — H-03 exchange ratio inflation acknowledgedretrieved 2026-05-17
Methodology #
Determine whether shared numerator/denominator arithmetic operates over tokens with different decimals without WAD/RAY normalization or explicit decimal-adjustment.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol kinetiq factor RD-F-017 score yellow collected_at 2026-05-17 15:29:57