Skip to content

feat(checks): ERC-777 reentrancy via tokensReceived hook (closes #19)#26

Merged
abhicris merged 1 commit into
mainfrom
kcolb/erc777-reentrancy-check
May 25, 2026
Merged

feat(checks): ERC-777 reentrancy via tokensReceived hook (closes #19)#26
abhicris merged 1 commit into
mainfrom
kcolb/erc777-reentrancy-check

feat(checks): ERC-777 reentrancy via tokensReceived hook (closes #19)

b30edd7
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / Slither failed May 19, 2026 in 6s

6 new alerts including 1 high severity security vulnerability

New alerts in code changed by this pull request

Security Alerts:

  • 1 high
  • 1 medium

Other Alerts:

  • 4 warnings

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 85 in src/examples/VulnerableERC777Vault.sol

See this annotation in the file changed.

Code scanning / Slither

Unchecked transfer High

VulnerableERC777Vault.withdraw() ignores return value by token.transfer(msg.sender,owed)

Check warning on line 67 in src/checks/ERC777ReentrancyCheck.sol

See this annotation in the file changed.

Code scanning / Slither

State variables that could be declared immutable Warning

ERC777ReentrantAttacker.target should be immutable

Check warning on line 70 in src/checks/ERC777ReentrancyCheck.sol

See this annotation in the file changed.

Code scanning / Slither

State variables that could be declared constant Warning

ERC777ReentrantAttacker.maxReentries should be constant

Check warning on line 26 in src/examples/VulnerableERC777Vault.sol

See this annotation in the file changed.

Code scanning / Slither

State variables that could be declared constant Warning

MockERC777Token.name should be constant

Check warning on line 27 in src/examples/VulnerableERC777Vault.sol

See this annotation in the file changed.

Code scanning / Slither

State variables that could be declared constant Warning

MockERC777Token.symbol should be constant

Check warning on line 85 in src/examples/VulnerableERC777Vault.sol

See this annotation in the file changed.

Code scanning / Slither

Reentrancy vulnerabilities Medium

Reentrancy in VulnerableERC777Vault.withdraw():
External calls:
- token.transfer(msg.sender,owed)
State variables written after the call(s):
- deposits[msg.sender] = 0
VulnerableERC777Vault.deposits can be used in cross function reentrancies:
- VulnerableERC777Vault.deposit(uint256)
- VulnerableERC777Vault.deposits
- VulnerableERC777Vault.withdraw()