defirisk.co
rubric v1.7.0

Empty cToken-style market (zero supply/borrow)

Meteora's assessment for RD-F-070 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

RD-F-070 is the critical-factor (★) for Compound V2 fork empty-cToken-market donation attacks. Meteora is an original Solana AMM (DLMM bin-based, DAMM constant-product, DBC bonding curve) with no Compound V2 fork lineage. Profile §5 explicitly confirms: 'Not forked / original. Meteora (previously Mercurial Finance) is an independently designed protocol suite.' No cToken mechanics, no share-based lending markets, and no zero-supply cToken exploit path exist. Taxonomy Cat 4 PD-024 states: 'Compound-fork-only (subset of lending-only): RD-F-070 — N/A for non-Compound-fork protocols.' ★ critical-flag penalty does NOT apply.

Sources #

  • Internal
    Meteora protocol profile §5 — fork lineage.research/protocols/meteora/00-profile.md §5: Not forked / original. Meteora is independently designed; not a Compound V2 fork.retrieved 2026-05-16
  • URL
    What is DLMM — docs.meteora.agMeteora DLMM architecture: bin-based concentrated liquidity market maker on Solana — no cToken-style zero-supply market patternretrieved 2026-05-16
  • Internal
    Taxonomy Cat 4 PD-024research/outputs/03-taxonomy.md §Category 4 PD-024 annotation: Compound-fork-only: RD-F-070 — N/A for non-Compound-fork protocolsretrieved 2026-05-16

Methodology #

Determine whether any listed Compound V2-fork market has `totalSupply == 0` and `totalBorrow == 0`, the precondition for a donation-exploit.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol meteora factor RD-F-070 score not_applicable collected_at 2026-05-16 10:03:05