ERC-777/1155/721 hook without reentrancy guard
Convex Finance's assessment for RD-F-015 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Convex core deposit/reward path uses CRV, CVX, and Curve LP tokens — all standard ERC-20 without callbacks. No ERC-777 tokensReceived, ERC-1155 onReceived, or ERC-721 onReceived integrations found in Booster or BaseRewardPool. ExtraRewardStashV3 handles arbitrary ERC-20 reward tokens but does not hook into ERC-777 callback patterns.
Sources #
- GitHubConvex ExtraRewardStashV3.sol source (no ERC-777 callback hooks)ExtraRewardStashV3.sol sourceretrieved 2026-05-16
- Convex Booster.sol source (no ERC-777/1155/721 integrations)Booster.sol - standard ERC-20 tokens onlyretrieved 2026-05-16
Methodology #
Determine whether the protocol integrates token standards with callbacks (ERC-777 tokensReceived, ERC-1155 onReceived, ERC-721 onReceived) without reentrancy guards on the affected functions.
See the full factor methodology and distribution across all protocols →