Bridge binds message to srcChainId

Pendle Finance's assessment for RD-F-152 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

mustOriginateFromSendEndpoint modifier verifies srcChainId matches expected sendEndpointChainId. Cross-chain replay between Pendle chains is prevented at the message level. Chain-bound message validation confirmed in source code.

Sources #

GitHub
PendleMsgReceiveEndpointUpg.sol — srcChainId bindingPendleMsgReceiveEndpointUpg.sol — mustOriginateFromSendEndpointretrieved 2026-04-29

Methodology #

Determine whether the bridge message struct includes `srcChainId` and the verifier enforces per-chain separation.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol pendle factor RD-F-152 score green collected_at 2026-04-28 21:09:40