defirisk.co
rubric v1.7.0

Default bytes32(0) acceptable as valid root

PancakeSwap's assessment for RD-F-154 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

[★ N/A-pattern] LayerZero V1 does NOT use Merkle root-based proof verification. No inbox contract accepting bytes32 roots. V1 proof model is oracle (block header hash) + relayer (Merkle branch proof of tx-in-block). Nomad bug class (acceptableRoot(bytes32) accepting 0) has no applicable analogue in V1 architecture.

Sources #

Methodology #

Determine whether the bridge inbox accepts a default-value (bytes32(0)) Merkle root as a valid proof root (Nomad bug class).

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol pancakeswap factor RD-F-154 score not_applicable collected_at 2026-04-28 19:10:57