First-depositor / share-inflation guard
Kinetiq's assessment for RD-F-075 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
kHYPE is not an ERC-4626 vault — primary ERC-4626 first-depositor framing does not apply. On the custom StakingAccountant model: _getExchangeRatio() explicitly returns 1e18 (1:1 ratio) when totalKHYPESupply==0, preventing division-by-zero and establishing safe initialization. First depositor mints at 1:1 and cannot inflate the rate via donation — the rate is admin-controlled via Operator pushes (rewardsAmount, slashingAmount), not donation-manipulable. The share-inflation attack vector is structurally absent in this architecture. Process-learnings LST template (liquid-collective): F075 N/A for non-ERC-4626 LSTs. Not_applicable is the correct verdict.
Sources #
- URLDeepWiki Kinetiq StakingAccountant first-depositor guardDeepWiki StakingAccountant analysis — _getExchangeRatio(): 'if (totalKHYPESupply == 0) { return 1e18; }' — 1:1 initialization guard. Rate is admin-push via Operator, not donation-manipulable.retrieved 2026-05-17
Methodology #
Determine whether the vault has a first-depositor guard (seed deposit on deploy, virtual-share offset, or floor-check).
See the full factor methodology and distribution across all protocols →