★ Reinitializable implementation (no _disableInitializers)
Veda (BoringVault)'s assessment for RD-F-143 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
BoringVault and all peripheral contracts use constructors, not initializers. No proxy pattern, no initialize() function, no OZ Initializable inheritance. _disableInitializers() concern applies only to proxy implementation contracts — not applicable here.
Sources #
- GitHubBoringVault.sol — constructor pattern, no proxy/initializerBoringVault.sol constructor: Auth(_owner, Authority(address(0))) — no initialize(), no proxyretrieved 2026-05-17
Methodology #
Determine whether the implementation contract does not call `_disableInitializers()` in its constructor, leaving re-initialization possible.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol veda factor RD-F-143 score green collected_at 2026-05-17 12:41:22