★ Bridge ecrecover checks result ≠ address(0)

Evidence summary #

Centrifuge's WormholeAdapter.sol validates msg.sender == address(relayer) and source address against a whitelisted mapping; it does NOT perform ecrecover itself. VAA signature validation (13-of-19 guardians via ecrecover) occurs inside Wormhole's core contracts. Centrifuge's adapter trusts the Wormhole relayer contract as an oracle of truth. Assessment: yellow because critical validation is abstracted to an external dependency.

Sources #

Methodology #

Determine whether the bridge verifier code rejects `ecrecover` returns of `address(0)`.

See the full factor methodology and distribution across all protocols →