Re-deployed to new addresses in last year
Chainlink CCIP's assessment for RD-F-088 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
CCIP has deployed multiple new contract sets in the past 12 months as part of active version upgrades. CCIP v1.5 (announced Oct 2024, went live Jan 2025) and v1.6 (May 2025) both introduced new OnRamp/OffRamp contract addresses per lane on each supported chain. The Ethereum Router (0x80226fc0ee2b096224eeac085bb9a8cba1146f7d) is immutable and unchanged, but per-lane routing contracts are version-specific. New contract deploy surface is inherent to CCIP's versioning model - not an incident indicator but noted as new attack surface creation. Changelog: https://dev.chain.link/changelog shows active deployment cadence.
Sources #
- URLChainlink Changelog and ReleasesChainlink changelog showing active CCIP deployment cadence including v1.5 and v1.6 updates with new contract deploymentsretrieved 2026-05-16
- Introducing the CCIP Cross-Chain Token (CCT) StandardCCIP v1.5 upgrade announcement including new contract addresses for per-chain cursing and CCT standardretrieved 2026-05-16
Methodology #
Determine whether the protocol retired prior deployed contracts and redeployed to a new address set in the last 12 months.
See the full factor methodology and distribution across all protocols →