defirisk.co
rubric v1.7.0

CREATE2 factory permits same-address redeploy

Convex Finance's assessment for RD-F-144 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No CREATE2-based deployment pattern found in core contracts. Standard CREATE deployment used for all core platform contracts (Booster, VoterProxy, CVX, BoosterOwner). Reward contracts for pools are deployed by factory contracts but not via CREATE2 in a way that permits same-address redeployment with different bytecode.

Sources #

  • Etherscan
    Booster -- EtherscanBooster 0xF403C1... -- created by standard transaction, not CREATE2 factory patternretrieved 2026-05-16
  • GitHub
    Convex Booster.sol -- GitHub sourceBooster.sol, BoosterOwner.sol -- no CREATE2 deployment pattern in core contractsretrieved 2026-05-16

Methodology #

Determine whether a CREATE2 factory deployment allows redeployment to the same address with different bytecode (via selfdestruct + redeploy pattern).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol convex-finance factor RD-F-144 score green collected_at 2026-05-16 02:41:28