defirisk.co
rubric v1.7.0

Default bytes32(0) acceptable as valid root

Meteora's assessment for RD-F-154 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

CRITICAL FACTOR - NOT_APPLICABLE. Meteora has no Merkle root acceptance logic, no bridge inbox, and no cross-chain proof validation. The Nomad-class default-value bytes32(0) root acceptance bug is structurally inapplicable: (1) Meteora has no bridge, (2) Meteora is Solana-only with no EVM contracts that would use bytes32 types for Merkle roots, (3) no cross-chain messaging architecture exists.

Sources #

  • Internal
    Meteora 00-profile.meta.jsonProfile: is_a_bridge=false, has_bridge_surface=false, non_evm_substrate=trueretrieved 2026-05-16
  • Internal
    Meteora 00-data-cache.jsonData-cache: layerzero.present=false; no bridge endpoint, no Merkle root validation code in Solana programsretrieved 2026-05-16

Methodology #

Determine whether the bridge inbox accepts a default-value (bytes32(0)) Merkle root as a valid proof root (Nomad bug class).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol meteora factor RD-F-154 score not_applicable collected_at 2026-05-16 10:03:05