diff --git a/templates/Contract-Code-Review.md b/templates/Contract-Code-Review.md index f9ec697..86d09df 100644 --- a/templates/Contract-Code-Review.md +++ b/templates/Contract-Code-Review.md @@ -22,6 +22,7 @@ _What is the PR trying to do? Is this the right thing? Are there bugs in the req - [ ] Contract does not send or receive Ethereum. - [ ] Contract has no payable methods. - [ ] Contract is not vulnerable to being sent self destruct ETH +- [ ] If contract interacts with ETH make sure there are no read only reentrancies (like [this one]([url](https://chainsecurity.com/curve-lp-oracle-manipulation-post-mortem/)) in Curve pools) #### Cryptographic code