CREATE2 factory permits same-address redeploy
crvUSD (Curve Stablecoin)'s assessment for RD-F-144 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
crvUSD uses Vyper blueprint factory pattern. New markets are deployed with distinct parameters per market. No evidence of a CREATE2-same-address redeploy attack vector. Vyper blueprint deployments use create_from_blueprint() with fresh storage, not CREATE2 deterministic addresses with selfdestruct-redeploy risk.
Sources #
- GitHubCurve Stablecoin RepositoryCurve stablecoin repo uses Vyper blueprint deployment pattern for Controllers and LLAMMA AMMsretrieved 2026-05-16
Methodology #
Determine whether a CREATE2 factory deployment allows redeployment to the same address with different bytecode (via selfdestruct + redeploy pattern).
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol crvusd factor RD-F-144 score green collected_at 2026-05-16 19:09:40