defirisk.co
rubric v1.7.0

First-depositor / share-inflation guard

Ondo Finance's assessment for RD-F-075 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

For Flux Finance cToken markets: no on-chain first-depositor guard exists. Acknowledged out-of-scope in bug bounty. Manual mitigation (team seeds the market) is the only protection. For OUSG/USDY: not applicable (not share-based vaults). For OUSG in Flux as collateral: when fOUSG market was initialized, it appears the team manually seeded it (current balance ~$38.7M); no evidence of exploitation to date. Structural gap remains for any future market listing.

Sources #

  • Curator note
    Extracted from 04-economic.md — RD-F-075 finding; no URL cited in originalretrieved 2026-04-28

Methodology #

Determine whether the vault has a first-depositor guard (seed deposit on deploy, virtual-share offset, or floor-check).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol ondo-finance factor RD-F-075 score gray collected_at 2026-05-14 12:01:55