CREATE2 factory permits same-address redeploy
Wormhole's assessment for RD-F-144 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
CREATE2 factory permits redeploy to same address | Wormhole uses BeaconProxy pattern for wrapped tokens (found in Bridge.sol). No evidence of CREATE2 misuse for core contracts. This is a peripheral risk on wrapped token contracts, not the Core Bridge itself. | Bridge.sol analysis (BeaconProxy mention); Profile §3 | gray
Sources #
- Curator noteExtracted from 02-governance-admin.md — RD-F-144; no URL citedretrieved 2026-04-28
Methodology #
Determine whether a CREATE2 factory deployment allows redeployment to the same address with different bytecode (via selfdestruct + redeploy pattern).
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol wormhole factor RD-F-144 score gray collected_at 2026-04-28 01:38:43