Divide-before-multiply pattern
Wormhole's assessment for RD-F-016 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No published Slither output to confirm presence or absence of `divide-before-multiply` findings. Bridge.sol uses amount normalization/denormalization arithmetic for cross-chain precision. The CertiK audit's minor/informational findings did not call this out as a concern. Cannot confirm with tool run.
Sources #
- Curator noteExtracted from 01-code-security.md — RD-F-016 finding; no URL cited in originalretrieved 2026-04-28
Methodology #
Determine whether Slither's `divide-before-multiply` detector fires on the deployed verified source.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol wormhole factor RD-F-016 score gray collected_at 2026-04-28 01:38:43