defirisk.co
rubric v1.7.0

Bridge tracks nonce-consumed mapping

Curve Finance's assessment for RD-F-153 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

LayerZero V2 uses ordered nonce model per pathway (srcEid, sender, dstEid). Endpoint tracks lazyInboundNonce and inboundNonce ensuring ordered delivery and replay protection. Out-of-order messages are queued, not replayed. Each packet is consumed exactly once. Replay protection is structural in LZ V2 endpoint design.

Sources #

Methodology #

Determine whether the bridge inbox maintains a nonce-consumed mapping and rejects replay of used nonces.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol curve-v2 factor RD-F-153 score green collected_at 2026-04-28 19:48:40