defirisk.co
rubric v1.7.0

Default bytes32(0) acceptable as valid root

Marinade Finance's assessment for RD-F-154 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

[★ CRITICAL — NOT_APPLICABLE] No bridge; no Merkle root acceptance logic in Marinade's Solana BPF program. The Nomad-class default-value root acceptance bug requires a bridge inbox that accepts bytes32(0) as a valid root. Marinade has no bridge inbox, no cross-chain message validation, and no Merkle root acceptance logic. Factor does not engage.

Sources #

  • Docs
    Marinade contract addresses — no bridge inboxMarinade contract-addresses: only Solana staking program addresses; no bridge inbox contractretrieved 2026-05-16
  • Internal
    Marinade 00-profile.md §7Profile §7: has_bridge_surface: false, is_a_bridge: false. No bridge contract owned by Marinade.retrieved 2026-05-16

Methodology #

Determine whether the bridge inbox accepts a default-value (bytes32(0)) Merkle root as a valid proof root (Nomad bug class).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol marinade factor RD-F-154 score not_applicable collected_at 2026-05-16 08:48:35