Bridge binds message to srcChainId
Hyperlane's assessment for RD-F-152 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Yes. Mailbox verifies _message.destination() == localDomain (prevents cross-chain replay to wrong destination). CheckpointLib.digest() includes _message.origin() in the digest computation, binding signatures to origin chain. Message struct includes origin domain ID. Cross-chain replay structurally prevented.
Sources #
- GitHubMailbox.sol — destination chain bindingMailbox.sol process() — require(_message.destination() == localDomain, 'Mailbox: unexpected destination')retrieved 2026-05-17
- CheckpointLib.sol — origin binding in digestCheckpointLib.sol digest() — _origin param included in domain hash computationretrieved 2026-05-17
Methodology #
Determine whether the bridge message struct includes `srcChainId` and the verifier enforces per-chain separation.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol hyperlane factor RD-F-152 score green collected_at 2026-05-16 23:03:56