defirisk.co
rubric v1.7.0

Bridge ecrecover checks result ≠ address(0)

Marinade Finance's assessment for RD-F-151 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

[★ CRITICAL — NOT_APPLICABLE] No bridge; no ecrecover call in Marinade's Solana BPF program. Marinade is a Solana-native LST with no cross-chain messaging or bridge contract. ecrecover is an EVM primitive not used in the Marinade Rust/BPF codebase. Wormhole-bridged mSOL wrappers are external third-party contracts not controlled by Marinade. Factor does not engage.

Sources #

  • Internal
    Marinade 00-profile.md §7Profile §7: has_bridge_surface: false, is_a_bridge: false. No bridge surface owned by Marinade.retrieved 2026-05-16
  • GitHub
    Marinade Cargo.toml — no bridge SDKCargo.toml: no bridge SDK dependency; deps are anchor-lang/anchor-spl/solana-security-txt onlyretrieved 2026-05-16

Methodology #

Determine whether the bridge verifier code rejects `ecrecover` returns of `address(0)`.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol marinade factor RD-F-151 score not_applicable collected_at 2026-05-16 08:48:35