Mixed-decimals math without explicit scaling
Save (formerly Solend)'s assessment for RD-F-017 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Solend operates across assets with different decimals (SOL=9, USDC=6, etc.). Kudelski audit covered decimal math in v1.0 scope. The 13+ isolated pools added post-audit introduce per-pool decimal configurations not confirmed as within Kudelski audit scope. No confirmed finding of un-normalized arithmetic, but audit coverage of post-v1.0 pools is unverified.
Sources #
- DocsIsolated Pools | Save (formerly Solend)Solend isolated pools with per-pool configurationsretrieved 2026-05-17
- Solend Audit v1.0 — Kudelski SecurityKudelski v1.0 covers decimal math for initial deploymentretrieved 2026-05-17
Methodology #
Determine whether shared numerator/denominator arithmetic operates over tokens with different decimals without WAD/RAY normalization or explicit decimal-adjustment.
See the full factor methodology and distribution across all protocols →