ERC-777/1155/721 hook without reentrancy guard
Curve Finance's assessment for RD-F-015 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Curve pool contracts do not integrate ERC-777 token hooks. StableSwapNG supports standard ERC-20, oracle-equipped, rebasing, and ERC-4626 vault tokens but not ERC-777. NG contracts have @nonreentrant on all external-call paths. MixBytes audit confirmed fix of rebasing token balance accounting issues.
Sources #
- GitHubCurveStableSwapNG.vy source inspection — asset typesCurveStableSwapNG.vy — asset type documentation (no ERC-777)retrieved 2026-04-28
- MixBytes StableSwapNG Audit READMEMixBytes StableSwapNG audit — rebasing token issues confirmed fixedretrieved 2026-04-28
Methodology #
Determine whether the protocol integrates token standards with callbacks (ERC-777 tokensReceived, ERC-1155 onReceived, ERC-721 onReceived) without reentrancy guards on the affected functions.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol curve-v2 factor RD-F-015 score green collected_at 2026-04-28 19:48:40