Bridge binds message to srcChainId

Across Protocol's assessment for RD-F-152 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

YES — SpokePool EIP-712 domain includes chain ID via `__EIP712_init("ACROSS-V2", "1.0.0")` which binds signatures to the origin chain. SpokePool's `depositV3` includes `originChainId` in deposit data. Root bundle proposals include chain-specific leaf indices. Cross-chain replay prevented by chain binding in signature domain. OZ V2 audit found "inconsistent signature checking across chains" (medium, fixed in PR #79).

Sources #

Curator note
Extracted from 03-oracle-deps.md — RD-F-152 finding; no URL cited in originalretrieved 2026-04-28

Methodology #

Determine whether the bridge message struct includes `srcChainId` and the verifier enforces per-chain separation.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol across-protocol factor RD-F-152 score green collected_at 2026-04-30 21:19:18