Constructor calls _disableInitializers()
deBridge's assessment for RD-F-023 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
DlnBase.sol (parent of DlnSource and DlnDestination): `constructor() { _disableInitializers(); }` — correctly calls `_disableInitializers()` in parent constructor, which propagates protection to both DlnSource and DlnDestination. DeBridgeGate impl uses the older `constructor() initializer {}` pattern (equivalent protection for OZ 4.x). CrosschainForwarder implementation at 0x3c857eD... (sol 0.8.28): no `_disableInitializers()` in constructor per inspection — uses `initializer` modifier on `in...
Sources #
- Etherscanhttps://etherscan.io/address/0x3c857eD51c8a2747ee8c6f30edda5ea0d487cc64retrieved 2026-04-28
- https://etherscan.io/address/0x797161bcc625155d2302251404ccb93c2632658eretrieved 2026-04-28
Methodology #
Determine whether implementation contract constructors call `_disableInitializers()` to prevent re-initialization of the implementation directly.
See the full factor methodology and distribution across all protocols →