CREATE2 factory permits same-address redeploy
Chainlink CCIP's assessment for RD-F-144 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No evidence of CREATE2 deployment pattern in CCIP core contracts. Standard CREATE used for contract deployment. Constructor-based pattern confirmed across OnRamp, OffRamp, FeeQuoter, ARM.
Sources #
- GitHubCode4rena 2024-11-chainlink audit repoCode4rena 2024-11 contract sources — standard constructor pattern across all in-scope CCIP contracts; no CREATE2 usage identifiedretrieved 2026-05-16
Methodology #
Determine whether a CREATE2 factory deployment allows redeployment to the same address with different bytecode (via selfdestruct + redeploy pattern).
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol chainlink-ccip factor RD-F-144 score green collected_at 2026-05-16 01:55:09