Reentrancy guard on external-calling functions

Spiko's assessment for RD-F-014 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

ERC-1363 integration (transferAndCall in Token.sol) involves recipient callbacks. OZ ERC20Upgradeable base implements checks-effects-interactions for ERC-1363. ERC2771 meta-tx support (added Jan-2024 post-audit) adds a trusted forwarder pattern. No Slither run to formally confirm no reentrancy path; medium confidence yellow pending tool confirmation.

Sources #

GitHub
Spiko Token.sol - ERC1363 and ERC2771 importsToken.sol imports ERC1363Upgradeable and ERC2771ContextUpgradeableretrieved 2026-05-16

Methodology #

Determine whether all state-mutating functions that perform external calls carry `nonReentrant` or an equivalent reentrancy guard.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol spiko factor RD-F-014 score yellow collected_at 2026-05-15 22:52:13