Bridge tracks nonce-consumed mapping
Hyperliquid's assessment for RD-F-153 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Bridge2 maintains mapping(bytes32 => bool) public usedMessages with checkMessageNotUsed() enforcing single-use for validator set updates, locker/finalizer modifications, parameter changes, and emergency unlocks. Withdrawal requests use message-hash uniqueness. No replay possible. Confirmed in Zellic re-audit November 2023.
Sources #
- AuditHyperliquid Bridge2 Re-Audit — Zellic November 2023Zellic Audit November 2023 — replay protection reviewretrieved 2026-04-28
- Bridge2.sol — hyperliquid-dex/contracts GitHubBridge2.sol — usedMessages mapping and checkMessageNotUsed()retrieved 2026-04-28
Methodology #
Determine whether the bridge inbox maintains a nonce-consumed mapping and rejects replay of used nonces.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol hyperliquid factor RD-F-153 score green collected_at 2026-04-28 13:58:49