defirisk.co
rubric v1.7.0

ERC-4626 virtual-share offset (OZ ≥4.9)

Liquity V1 + V2 (LUSD / BOLD)'s assessment for RD-F-074 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

ERC-4626 vault virtual-share offset is not applicable to Liquity. Liquity v1 and v2 are original CDP designs using a Trove model, not ERC-4626 vault architecture. No ERC-4626 vault contract is involved in the core borrowing, Stability Pool, or redemption mechanism. The virtual-share inflation attack surface does not exist in this architecture.

Sources #

  • URL
    Liquity v2 bold GitHub repositoryLiquity v2 GitHub monorepo — original CDP architecture, no ERC-4626 vault import in core contractsretrieved 2026-05-16
  • Internal
    Liquity protocol profile — architecture sectionProfile §5: Not forked / original. No ERC-4626 components identified in core contracts. Trove-based CDP model.retrieved 2026-05-16

Methodology #

Determine whether ERC-4626 vaults use OpenZeppelin ≥4.9 virtual-share offset pattern to prevent first-depositor share-inflation.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol liquity factor RD-F-074 score not_applicable collected_at 2026-05-16 10:35:50