ERC-777/1155/721 hook without reentrancy guard
Across Protocol's assessment for RD-F-015 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Across handles ERC-20 tokens (WETH, USDC, etc.) via standard cross-chain bridge flows. No ERC-777 or ERC-1155 hook integration identified in core HubPool/SpokePool contracts. SwapAndBridge could in principle route through ERC-777 tokens but the nonReentrant guard on the SpokePool base would protect state. No OZ finding in this area.
Sources #
- URLOZ V3 incremental audit (Jan 2024)https://www.openzeppelin.com/news/across-v3-incremental-auditretrieved 2026-04-26
Methodology #
Determine whether the protocol integrates token standards with callbacks (ERC-777 tokensReceived, ERC-1155 onReceived, ERC-721 onReceived) without reentrancy guards on the affected functions.
See the full factor methodology and distribution across all protocols →