First-depositor / share-inflation guard
StakeWise v3's assessment for RD-F-075 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
VaultState.sol source confirms no MINIMUM_SHARES constant, no seed deposit on vault deploy, no virtual-share offset. The zero-state (totalShares_==0) case in convertToShares returns assets directly (1:1) — standard unguarded share vault behavior. VaultEnterExit.sol _deposit lacks seed deposit mechanism. VaultOsToken.sol does not add a first-depositor guard. However: (1) 6 independent audit engagements reviewed vault architecture (including Sigma Prime x3, Consensys Diligence, ABDK, Statemind 2026-04-20) without flagging share-inflation as a critical finding; (2) osETH over-collateralisation (90% LTV) provides structural indirect protection against system-level share-inflation attack. Scored yellow: absence of explicit on-chain guard is confirmed, but audit coverage and structural mitigation prevent red.
Sources #
- AuditConsensys Diligence StakeWise Audit 2024-03Consensys Diligence audit 2024-03 — EthFoxVault vault-specific review, no share-inflation critical reportedretrieved 2026-05-16
- Statemind StakeWise Core V3 Audit 2026-04-20Statemind audit 2026-04-20 — most recent audit covering vault architecture; no share-inflation critical reportedretrieved 2026-05-16
- VaultState.sol — share conversion zero-statestakewise/v3-core VaultState.sol — convertToShares zero-state returns 1:1; no MINIMUM_SHARESretrieved 2026-05-16
Methodology #
Determine whether the vault has a first-depositor guard (seed deposit on deploy, virtual-share offset, or floor-check).
See the full factor methodology and distribution across all protocols →