★ Bridge ecrecover checks result ≠ address(0)
Chainlink CCIP's assessment for RD-F-151 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
[★ CRITICAL] GREEN - PASS. MultiOCR3Base.sol: oracle set assignment rejects address(0) with OracleCannotBeZeroAddress(). In _verifySignatures, ecrecover result checked against signer role map - zero-address cannot hold Role.Signer. RMNRemote.sol verify(): 'if (signerAddress == address(0)) revert InvalidSignature()'. Both DON OCR path and RMN verification path guard against zero-address ecrecover return.
Sources #
- GitHubChainlink CCIP RMNRemote.sol (2024-11 Code4rena audit scope)RMNRemote.sol verify(): 'if (signerAddress == address(0)) revert InvalidSignature()' - explicit zero-address guard in RMN pathretrieved 2026-05-16
- Chainlink CCIP MultiOCR3Base.sol (2024-11 Code4rena audit scope)MultiOCR3Base.sol: 'if (oracle == address(0)) revert OracleCannotBeZeroAddress()' + '_verifySignatures: ecrecover result checked against Role.Signer requiring non-zero address'retrieved 2026-05-16
Methodology #
Determine whether the bridge verifier code rejects `ecrecover` returns of `address(0)`.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol chainlink-ccip factor RD-F-151 score green collected_at 2026-05-16 01:55:09