defirisk.co
rubric v1.7.0

CREATE2 factory permits same-address redeploy

Across Protocol's assessment for RD-F-144 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

CREATE2 factory permits redeploy to same address | No evidence of CREATE2 redeployability risk. SpokePool contracts use EIP-1967 UUPS proxy pattern — the proxy address is stable; implementation swaps are via upgradeTo. No CREATE2 factory pattern in scope. | Profile §3 (EIP-1967 proxies); OZ audit scope documentation | green

Sources #

  • Curator note
    Extracted from 02-governance-admin.md — RD-F-144; no URL citedretrieved 2026-04-28

Methodology #

Determine whether a CREATE2 factory deployment allows redeployment to the same address with different bytecode (via selfdestruct + redeploy pattern).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol across-protocol factor RD-F-144 score gray collected_at 2026-04-30 21:19:18