Constructor calls _disableInitializers()

Evidence summary #

Bridge2.sol uses a constructor but does NOT call _disableInitializers(). Since Bridge2 does not use an initializer pattern (uses a real constructor), the OZ guidance is not structurally required — the constructor IS the initialization. However, defense-in-depth practice would still apply _disableInitializers() to prevent any future confusion. Slightly below best practice for a proxy-wrapped contract.

Sources #

Methodology #

Determine whether implementation contract constructors call `_disableInitializers()` to prevent re-initialization of the implementation directly.

See the full factor methodology and distribution across all protocols →