defirisk.co
rubric v1.7.0

Flash-loanable voting weight

SUNSwap (sun.io)'s assessment for RD-F-036 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

SUN DAO uses veSUN vote-escrow (Curve-style Vyper VotingEscrow). Voting power is time-weighted lock-based: tokens must be locked 26 weeks to 4 years. _checkpoint() function records historical voting power; point_history and user_point_history provide block-level snapshots; balanceOfAt() queries historical voting power. @nonreentrant('lock') prevents reentrancy. Flash loan cannot acquire veSUN: tokens must be locked before governance voting. Green by construction.

Sources #

Methodology #

Determine whether governance voting power is a function of current token balance of a transferable token with no lock or checkpoint, making it flash-loan susceptible.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sunswap factor RD-F-036 score green collected_at 2026-05-17 14:37:31