Bridge rate-limiter / chain-pause as positive mitigant
Curve Finance's assessment for RD-F-185 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Curve suspended LayerZero bridge infrastructure in April 2026 following rsETH exploit. No active programmatic rate-limiter documented for the suspended LayerZero bridge. xchain-factory bridge wrappers are chain-specific without a universal rate-limiter. Vyper AMM pools on Ethereum are immutable — no chain-pause mechanism applicable. Suspension provides de-facto protection (no outflows possible) but is not a programmatic rate-limiter.
Sources #
- GitHubcurve-xchain-factory GitHubgithub.com/curvefi/curve-xchain-factory — cross-chain gauge infrastructure, no rate-limiter foundretrieved 2026-04-28
- Curve Finance halts LayerZero bridging after rsETH hackbingx.com/en/flash-news/post/curve-finance-halts-layerzero-bridging-after-rseth-hack — LayerZero suspension April 2026retrieved 2026-04-28
Methodology #
Determine whether the bridge implements a per-window outflow rate-limiter (and at what cap), and whether the protocol team can trigger a chain-level or validator-set emergency pause.
See the full factor methodology and distribution across all protocols →