Constructor calls _disableInitializers()

Venus Protocol's assessment for RD-F-023 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Isolated Pools VToken.sol confirmed: constructor calls _disableInitializers(). Core Pool VToken.sol (legacy Compound-derived): no _disableInitializers in the constructor path. Diamond.sol does not call _disableInitializers(). Split in hygiene between Core Pool (legacy pattern) and Isolated Pools (modern OZ pattern).

Sources #

GitHub
Diamond.sol — no _disableInitializers callDiamond.sol — no _disableInitializersretrieved 2026-04-28
GitHub
Isolated Pools VToken.sol — _disableInitializers() in constructor confirmedIsolated Pools VToken.sol constructorretrieved 2026-04-28

Methodology #

Determine whether implementation contract constructors call `_disableInitializers()` to prevent re-initialization of the implementation directly.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol venus factor RD-F-023 score yellow collected_at 2026-04-28 18:30:49