Reentrancy guard on external-calling functions

Synapse Protocol's assessment for RD-F-014 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Saddle-fork MetaSwapUtils._calculateSwap() lacked virtual price check — exploited Nov 2021 ($8.2M at risk, $0 lost). Patch applied post-incident; current state unaudited.

Sources #

URL
https://rekt.news/synapse-protocol-rekt/retrieved 2026-05-06

Methodology #

Determine whether all state-mutating functions that perform external calls carry `nonReentrant` or an equivalent reentrancy guard.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol synapse factor RD-F-014 score yellow collected_at 2026-04-26 21:35:35