ERC-777/1155/721 hook without reentrancy guard

Balancer (v2 + v3)'s assessment for RD-F-015 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Balancer explicitly excludes non-standard ERC-20 tokens (ERC-777 callback tokens, rebasing tokens, fee-on-transfer tokens) from protocol compatibility. The Immunefi scope exclusion confirms 'Non-standard ERC20 tokens...exhibiting unexpected behavior' are out of scope. No ERC-777/ERC-1155/ERC-721 token hook integration without reentrancy guards found in core protocol.

Sources #

URL
Balancer Immunefi Bug Bounty ($1M max, 38 assets, last updated 2026-04-27)https://immunefi.com/bug-bounty/balancer/retrieved 2026-05-05
Docs
Balancer v3 docs: token compatibility requirementshttps://docs.balancer.firetrieved 2026-05-05

Methodology #

Determine whether the protocol integrates token standards with callbacks (ERC-777 tokensReceived, ERC-1155 onReceived, ERC-721 onReceived) without reentrancy guards on the affected functions.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol balancer factor RD-F-015 score green collected_at 2026-05-05 12:41:36