Bridge binds message to srcChainId

Curve Finance's assessment for RD-F-152 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

LayerZero V2 OApp: messages scoped to source endpoint ID (EID = chain-specific). Each OApp sets trusted peers via setPeer(srcEid, peer) — messages include source EID in packet header, verified by DVNs. A message from chain A cannot be replayed as chain B because the source EID is part of the verified packet structure. Chain separation is structural in LZ V2, not an afterthought.

Sources #

GitHub
Curve Finance LayerZero V2 Vyper implementationcurvefi/LayerZero-v2-vyper — Curve's Vyper implementation of LZ V2 OApp interfaceretrieved 2026-04-28
URL
LayerZero V2 OApp QuickstartLayerZero V2 OApp standard: setPeer(srcEid, peer) — chain-binding via endpoint IDretrieved 2026-04-28

Methodology #

Determine whether the bridge message struct includes `srcChainId` and the verifier enforces per-chain separation.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol curve-v2 factor RD-F-152 score green collected_at 2026-04-28 19:48:40