40,000 USDC
View results
Submission Details
Severity: low

Functions calling contracts with transfer hooks are missing reentrancy guards

Summary

Functions calling contracts with transfer hooks are missing reentrancy guards

Vulnerability Details

Even if the function follows the best practice of check-effects-interaction, not using a reentrancy guard when there may be transfer hooks will open the users of this protocol up to read-only reentrancies with no way to protect against it, except by block-listing the whole protocol.

Recommendations

use reentrancy guards

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.