★ Public initialize() without initializer modifier
Synapse Protocol's assessment for RD-F-022 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
`initializer` modifier IS present on initialize() — proxy-side guard correct. However, no `_disableInitializers()` call (Solidity 0.6.12 predates OZ 4.3+), meaning the raw implementation is directly callable. See RD-F-143 for implementation-level risk.
Sources #
- GitHub
Methodology #
Determine whether any implementation contract exposes `initialize(…)` without the OpenZeppelin `initializer` modifier or equivalent initialization lock.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol synapse factor RD-F-022 score yellow collected_at 2026-04-26 21:35:35