★ Admin has mint() with unlimited max
Multipli's assessment for RD-F-042 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
MultipliVault's mint() overrides ERC-4626 with whenNotPaused+nonReentrant+requiresAuth+minDepositAmount — this is user-facing mint with floor, not an admin-callable unlimited mint. No separate admin mint(address,uint256) without supply cap found in vault source. rwaUSD token (RwaUsdToken) mint mechanism is undisclosed — its Ledger Core-mediated issuance model may have admin-controlled uncapped issuance. Assessed yellow: vault component green; rwaUSD component unverifiable (not deployed).
Sources #
- GitHubMultipliVault.sol — mint() constrained by minDepositAmount and requiresAuthMultipliVault.sol v2: function mint(uint256 shares, address receiver) public override whenNotPaused nonReentrant — minDepositAmount enforcedretrieved 2026-05-17
- Multipli contract suite docs — rwaUSD token described architecturally onlydocs.multipli.fi contract-suite: RwaUsdToken described but no source or supply-cap confirmedretrieved 2026-05-17
Methodology #
Determine whether an admin-callable `mint` on a protocol token has no supply cap or an unlimited maximum supply.
See the full factor methodology and distribution across all protocols →