Reentrancy guard on external-calling functions
Across Protocol's assessment for RD-F-014 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
SpokePool inherits from `ReentrancyGuardUpgradeable` (OZ). All deposit/fill functions use `nonReentrant` modifier pattern inherited from the base. HubPool uses `nonReentrant` on state-mutating external-calling functions. OZ audits have not flagged reentrancy as a live issue in 18 engagements.
Sources #
- URLhttps://www.openzeppelin.com/customer-stories/acrossretrieved 2026-04-28
Methodology #
Determine whether all state-mutating functions that perform external calls carry `nonReentrant` or an equivalent reentrancy guard.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol across-protocol factor RD-F-014 score green collected_at 2026-04-30 21:19:18