Bridge validator co-hosting

PancakeSwap's assessment for RD-F-150 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Under default LayerZero V1 configuration, both oracle and relayer are operated by LayerZero Labs — maximum possible co-hosting (same entity). If PancakeSwap configured custom oracle/relayer, they could separate operators, but no evidence of custom config found for CakeProxyOFT.

Sources #

URL
Composable Security — LayerZero integration risksSearch: 'almost no one built alternative relayers' — default LayerZero Labs relayer used by most appsretrieved 2026-04-28

Methodology #

Determine whether validators share ASN or data-center/custodian per on-chain and OSINT inference.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol pancakeswap factor RD-F-150 score yellow collected_at 2026-04-28 19:10:57