defirisk.co
rubric v1.7.0

Bridge ecrecover checks result ≠ address(0)

Synapse Protocol's assessment for RD-F-151 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

NOT APPLICABLE — Synapse legacy bridge and RFQ FastBridge do not use ecrecover for on-chain signature verification. NODEGROUP_ROLE uses AccessControl role check; RFQ has no ecrecover calls (confirmed by source inspection). Forged zero-address signature exploit cannot fire.

Sources #

Methodology #

Determine whether the bridge verifier code rejects `ecrecover` returns of `address(0)`.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol synapse factor RD-F-151 score green collected_at 2026-04-26 21:35:35