CREATE2 factory permits same-address redeploy
Curve Finance's assessment for RD-F-144 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
NG factory uses CREATE2 for deterministic pool deployment addresses but deploys immutable pools — no mechanism to redeploy to same address with different bytecode. Each pool is a fresh immutable instance. No evidence of CREATE2 redeployment attack surface.
Sources #
- URLMixBytes: StableSwapNG architecturemixbytes.io/blog/modern-dex-es-how-they-re-made-curve-stable-swap-ng — pool deployment patternretrieved 2026-04-28
Methodology #
Determine whether a CREATE2 factory deployment allows redeployment to the same address with different bytecode (via selfdestruct + redeploy pattern).
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol curve-v2 factor RD-F-144 score green collected_at 2026-04-28 19:48:40