★ Reinitializable implementation (no _disableInitializers)
PancakeSwap's assessment for RD-F-143 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Primary TVL-bearing contracts are immutable non-proxy deploys — reinitializer risk N/A for these. Infinity/V4 uses singleton-vault architecture. Whether any Infinity peripheral contracts use proxy pattern without _disableInitializers() cannot be confirmed without direct source inspection. Gray due to assessment gap on Infinity peripheral surface.
Sources #
- EtherscanPancakeSwap Factory V2 — BscScanBscScan — primary contracts non-proxy (Factory V2/V3, MasterChef V1/V2)retrieved 2026-04-28
- Infinity assessment gapInfinity peripheral contract surface not fully inspected for proxy patternsretrieved 2026-04-28
Methodology #
Determine whether the implementation contract does not call `_disableInitializers()` in its constructor, leaving re-initialization possible.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol pancakeswap factor RD-F-143 score gray collected_at 2026-04-28 19:10:57