Bridge binds message to srcChainId

Spiko's assessment for RD-F-152 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

CCIP messages include sourceChainSelector as part of the message header. OffRamp enforces per-chain separation via sourceChainSelector — one CommitStore per source-chain per destination-chain (per-lane architecture). Messages from chain A cannot be replayed on chain B. Chain binding is a core CCIP architectural property.

Sources #

GitHub
CCIP OffRamp.sol — code-423n4 audit repositoryOffRamp.sol — sourceChainSelector used in nonce management and root storage: s_roots[sourceChainSelector][root]retrieved 2026-05-16
URL
Llama Risk CCIP Explainerllamarisk.com/research/explainer-series-ccip — 'only one CommitStore exists per lane' confirming per-chain separationretrieved 2026-05-16

Methodology #

Determine whether the bridge message struct includes `srcChainId` and the verifier enforces per-chain separation.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol spiko factor RD-F-152 score green collected_at 2026-05-15 22:52:13