Bridge tracks nonce-consumed mapping

Across Protocol's assessment for RD-F-153 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

YES — Core deposits use sequential `numberOfDeposits` counter (uint32). ERC-3009/Permit2 flow uses `permitNonces` mapping (added in response to Periphery Changes audit finding, resolved PR #1015). CounterfactualDepositOFT uses `usedNonces` mapping. Replay protection is present in all identified deposit paths. SpokePool claimed-leaf bitmap prevents double-execution of Merkle leaves (`MerkleLib.isClaimed()` / `MerkleLib.setClaimed()`).

Sources #

Curator note
Extracted from 03-oracle-deps.md — RD-F-153 finding; no URL cited in originalretrieved 2026-04-28

Methodology #

Determine whether the bridge inbox maintains a nonce-consumed mapping and rejects replay of used nonces.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol across-protocol factor RD-F-153 score green collected_at 2026-04-30 21:19:18