Bridge binds message to srcChainId

Lido's assessment for RD-F-152 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Wormhole VAAs include srcChainId. CrossDomainMessenger enforces per-chain isolation via onlyFromCrossDomainAccount. Chain binding enforced at infrastructure level.

Detail #

Wormhole VAA structure includes chain ID as part of the message. NTT EndpointManager validates source-chain identity. L1ERC20ExtendedTokensBridge: onlyFromCrossDomainAccount(L2_TOKEN_BRIDGE) — only accepts messages from designated L2 bridge.

Sources #

GitHub
https://github.com/lidofinance/lido-l2-with-steth/blob/main/contracts/optimism/L1ERC20ExtendedTokensBridge.solretrieved 2026-04-28

Methodology #

Determine whether the bridge message struct includes `srcChainId` and the verifier enforces per-chain separation.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol lido factor RD-F-152 score green collected_at 2026-04-28 13:58:42