defirisk.co
rubric v1.7.0

Reinitializable implementation (no _disableInitializers)

Pendle Finance's assessment for RD-F-143 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

[★] StakedPendle.sol (implementation of sPENDLE proxy 0x999999999991E178D52Cd95AFd4b00d066664144) calls _disableInitializers() in its constructor. Confirmed from source code at commit 7bde3ec (2026-01-20). Reinitializer attack on the sPENDLE implementation is blocked.

Sources #

Methodology #

Determine whether the implementation contract does not call `_disableInitializers()` in its constructor, leaving re-initialization possible.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol pendle factor RD-F-143 score green collected_at 2026-04-28 21:09:40