defirisk.co
rubric v1.7.0

Public initialize() without initializer modifier

Sky Lending (formerly MakerDAO)'s assessment for RD-F-022 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

USDS implementation exposes initialize() with OZ initializer modifier; constructor calls _disableInitializers(). Legacy MCD contracts (Vat, Pot, Jug) are non-proxied with constructor init — no initialize() present. No unprotected initialize found on any live implementation.

Sources #

  • Etherscan
    https://etherscan.io/address/0x1923DfeE706A8E78157416C29cBCCFDe7cdF4102retrieved 2026-04-27
  • URL
    https://github.com/sky-ecosystem/usds/blob/master/src/Usds.solretrieved 2026-04-27

Methodology #

Determine whether any implementation contract exposes `initialize(…)` without the OpenZeppelin `initializer` modifier or equivalent initialization lock.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sky-lending factor RD-F-022 score green collected_at 2026-04-28 00:43:18