defirisk.co
rubric v1.7.0

Bridge tracks nonce-consumed mapping

Jito's assessment for RD-F-153 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Wormhole uses (emitter_chain, emitter_address, sequence) tuple uniqueness and VAA digest-based replay protection. Sequence is auto-incrementing per emitter. Digest (double-keccak256 of VAA body) can be checked against consumed set. Wormhole EVM core contract implements this replay prevention.

Sources #

  • URL
    Wormhole VAAs — replay protectionWormhole VAA docs: sequence is auto-incrementing; 'VAA digest can be used for replay protection by checking if the digest has already been seen'retrieved 2026-04-29

Methodology #

Determine whether the bridge inbox maintains a nonce-consumed mapping and rejects replay of used nonces.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol jito factor RD-F-153 score green collected_at 2026-04-29 15:50:23