ERC-777/1155/721 hook without reentrancy guard
Axelar Network's assessment for RD-F-015 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Code4rena 2023-07 found ERC-777 token exploitation as a HIGH finding in ITS cross-chain token transfer paths. Remediation confirmed in subsequent Ackee 2025-01 ITS audit. Yellow: historical high finding in ITS ERC-777 path since remediated; ongoing vigilance needed for new token type integrations.
Sources #
- AuditCode4rena 2023-07 - ERC-777 High FindingCode4rena 2023-07: HIGH ERC-777 exploitation in ITS token transferretrieved 2026-05-17
- Ackee ITS 2025-01 - ERC-777 Remediation ConfirmedAckee 2025-01 ITS audit - post-remediation confirmationretrieved 2026-05-17
Methodology #
Determine whether the protocol integrates token standards with callbacks (ERC-777 tokensReceived, ERC-1155 onReceived, ERC-721 onReceived) without reentrancy guards on the affected functions.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol axelar factor RD-F-015 score yellow collected_at 2026-05-16 21:57:49