defirisk.co
rubric v1.7.0

ERC-4626 virtual-share offset (OZ ≥4.9)

stHYPE (Valantis Labs)'s assessment for RD-F-074 — scored not_assessed on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

wstHYPE is a non-rebasing share-valued wrapper of rebasing stHYPE. Docs describe it as reading share balances from the stHYPE contract with admin transfer rights. No explicit statement that wstHYPE implements ERC-4626 or uses an OZ >=4.9 virtual-share offset. SDK (sthype-sdk) has only viem ^2.0.0 as runtime dependency — no OpenZeppelin library dependency. Contracts source repo not confirmed public (ValantisLabs GitHub has SDK and audits repos but no confirmed Solidity contracts repo). hyperevmscan.io returns 403 on WebFetch blocking on-chain inspection of wstHYPE proxy 0x94e8396e0869c9F2200760aF0621aFd240E1CF38. Audit PDFs (Pashov Oct/Nov 2025, Guardian Nov 2025/Jan 2026, Obsidian Apr 2026) not readable via WebFetch. Cannot confirm or deny virtual-share offset without contract source.

Sources #

  • URL
    sthype-sdk package.jsonValantisLabs sthype-sdk package.json — viem only runtime dependency, no OZ libraryretrieved 2026-05-17
  • URL
    ValantisLabs audits repoValantisLabs audits repo — PDFs not machine-readableretrieved 2026-05-17
  • URL
    wstHYPE — Valantis DocsValantis docs wstHYPE — share accounting model description (reads from stHYPE, admin transfer rights)retrieved 2026-05-17

Methodology #

Determine whether ERC-4626 vaults use OpenZeppelin ≥4.9 virtual-share offset pattern to prevent first-depositor share-inflation.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol staked-hype factor RD-F-074 score not_assessed collected_at 2026-05-17 13:02:38