defirisk.co
rubric v1.7.0

ERC-777/1155/721 hook without reentrancy guard

Veda (BoringVault)'s assessment for RD-F-015 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

BoringVault.sol imports ERC721Holder and ERC1155Holder from OpenZeppelin — the standard safe-receipt pattern that does not introduce callback reentrancy risk. No ERC-777 integration detected. A-4 reviewed these integrations with no high/critical findings on callback paths.

Sources #

Methodology #

Determine whether the protocol integrates token standards with callbacks (ERC-777 tokensReceived, ERC-1155 onReceived, ERC-721 onReceived) without reentrancy guards on the affected functions.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol veda factor RD-F-015 score green collected_at 2026-05-17 12:41:22