defirisk.co
rubric v1.7.0

CREATE2 factory permits same-address redeploy

GMX v2 (GMX Synthetics)'s assessment for RD-F-144 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

CREATE2 factory usage in market/GLV token deployment not confirmed. MarketFactory deploys per-market MarketTokens. Whether CREATE2 allows redeployment to same address with different bytecode is not confirmed without MarketFactory source inspection.

Sources #

  • Curator note
    CREATE2 pattern unconfirmedMarketFactory.json present in deployments; CREATE2 pattern not confirmed. Deferred to code-security-analyst.retrieved 2026-05-05

Methodology #

Determine whether a CREATE2 factory deployment allows redeployment to the same address with different bytecode (via selfdestruct + redeploy pattern).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol gmx-v2 factor RD-F-144 score gray collected_at 2026-05-05 11:15:06