CREATE2 factory permits same-address redeploy

Beefy Finance's assessment for RD-F-144 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

BeefyVaultV7Factory uses ClonesUpgradeable. Standard clone() uses CREATE (not CREATE2), making same-address redeploy impossible. If cloneDeterministic() is used with reusable salts, redeploy risk could exist. Exact clone method variant not determined from available sources without deeper source inspection.

Sources #

GitHub
BeefyVaultV7Factory.sol — clone method unclearBeefyVaultV7Factory.sol uses ClonesUpgradeable — specific clone method (clone vs cloneDeterministic) not determinedretrieved 2026-05-16

Methodology #

Determine whether a CREATE2 factory deployment allows redeployment to the same address with different bytecode (via selfdestruct + redeploy pattern).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol beefy factor RD-F-144 score gray collected_at 2026-05-16 13:10:30