ERC-4626 virtual-share offset (OZ ≥4.9)
Midas's assessment for RD-F-074 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Not applicable — Midas DepositVault (Issuance Vault) is a bespoke permissioned contract, confirmed not to be an ERC-4626 vault. Etherscan read of impl 0xC8AF8477f3caa89f60fe9d1f48eee5433c55982b shows functions depositInstant, depositRequest, approveRequest — no ERC-4626 deposit/mint/withdraw/redeem interface. mTokens (mTBILL, mBASIS, mBTC) are plain ERC-20 tokens minted by the issuer via MINTER_ROLE, not ERC-4626 shares with a totalAssets/totalSupply ratio subject to first-depositor inflation. The virtual-share offset mitigation is inapplicable by architecture.
Sources #
- EtherscanEtherscan — Midas Issuance Vault implementationIssuance Vault impl 0xC8AF8477f3caa89f60fe9d1f48eee5433c55982b — exposes depositInstant, depositRequest, approveRequest; no ERC-4626 standard interfaceretrieved 2026-05-16
- Sherlock 2024-05 — mTBILL.sol (ERC-20, not ERC-4626)Sherlock 2024-05 mTBILL.sol — plain ERC-20 upgradeable token (ERC20PausableUpgradeable); no ERC-4626 vault interfaceretrieved 2026-05-16
Methodology #
Determine whether ERC-4626 vaults use OpenZeppelin ≥4.9 virtual-share offset pattern to prevent first-depositor share-inflation.
See the full factor methodology and distribution across all protocols →