★ Bridge ecrecover checks result ≠ address(0)

Pendle Finance's assessment for RD-F-151 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

[★ CRITICAL — GREEN] Pendle's bridge contracts (PendleMsgReceiveEndpointUpg.sol) do not use ecrecover for message verification. Authentication via onlyLzEndpoint modifier (msg.sender == LayerZero endpoint) and mustOriginateFromSendEndpoint (srcChainId + trusted remote address check). No ecrecover call present in Pendle's bridge verification path. This ★ factor does not fire.

Sources #

GitHub
PendleMsgReceiveEndpointUpg.solPendleMsgReceiveEndpointUpg.sol — onlyLzEndpoint + mustOriginateFromSendEndpointretrieved 2026-04-29

Methodology #

Determine whether the bridge verifier code rejects `ecrecover` returns of `address(0)`.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol pendle factor RD-F-151 score green collected_at 2026-04-28 21:09:40