★ Reinitializable implementation (no _disableInitializers)

Synapse Protocol's assessment for RD-F-143 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

SynapseBridge (Solidity 0.6.12) has no _disableInitializers() call. The initialize() function's initializer modifier prevents re-initialization via proxy only. Any address can call initialize() on raw implementation 0x31fe...d0d and claim DEFAULT_ADMIN_ROLE.

Sources #

Etherscan
https://etherscan.io/address/0x31fe393815822edacbd81c2262467402199efd0dretrieved 2026-04-26
URL
https://forum.openzeppelin.com/t/what-does-disableinitializers-function-mean/28730retrieved 2026-05-06
URL
https://l2beat.com/bridges/projects/synapseretrieved 2026-05-06

Methodology #

Determine whether the implementation contract does not call `_disableInitializers()` in its constructor, leaving re-initialization possible.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol synapse factor RD-F-143 score red collected_at 2026-04-26 21:35:35