Reentrancy guard on external-calling functions

Evidence summary #

Slither reentrancy detectors are EVM-only and cannot run on Rust/BPF. Solana CPI reentrancy is a real threat vector but is distinct from EVM reentrancy. Anchor's account borrowing model and the 2022 Kudelski/Neodyme audits address CPI reentrancy patterns. No findings on reentrancy reported in available audit summaries. Cannot assess via the specified toolchain on this substrate.

Sources #

Methodology #

Determine whether all state-mutating functions that perform external calls carry `nonReentrant` or an equivalent reentrancy guard.

See the full factor methodology and distribution across all protocols →