defirisk.co
rubric v1.7.0

Empty cToken-style market (zero supply/borrow)

Sanctum's assessment for RD-F-070 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Not a Compound V2 fork. No cToken-style markets, no per-market minting, no permissionless market-listing mechanism. Infinity uses SPL stake pool accounting (total_stake / token_supply = exchange_rate). Donation attack precondition (empty cToken market with zero supply) cannot arise in this architecture. N/A per orchestrator scope instructions and taxonomy PD-024 Compound-fork-only bucket.

Sources #

  • Curator note
    00-data-cache.json + 00-profile.md sanctumData cache lending_protocol: false, non_evm_substrate: true; profile §5 original Rust/Anchor architectureretrieved 2026-05-04
  • GitHub
    GitHub igneous-labs/S — Infinity programigneous-labs/S: Infinity program source — original Rust/Anchor implementation, not a Compound forkretrieved 2026-05-04

Methodology #

Determine whether any listed Compound V2-fork market has `totalSupply == 0` and `totalBorrow == 0`, the precondition for a donation-exploit.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sanctum factor RD-F-070 score not_applicable collected_at 2026-05-04 18:49:23