Reentrancy guard on external-calling functions

Evidence summary #

OffRamp.sol performs external calls to token pools and receiver contracts. Source review did not confirm nonReentrant on primary message execution path. CEI pattern and immutable pool references provide structural mitigation but cannot substitute for confirmed reentrancy guard presence without a Slither tool run.

Sources #

Methodology #

Determine whether all state-mutating functions that perform external calls carry `nonReentrant` or an equivalent reentrancy guard.

See the full factor methodology and distribution across all protocols →