evm: remove safeTransferFrom

evm/forge/tests/integrations/ComposingWithCircleIntegration.sol

@@ -1,5 +1,4 @@
 // SPDX-License-Identifier: Apache 2
-
 pragma solidity ^0.8.22;
 
 import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";

evm/forge/tests/integrations/InheritingWormholeCctp.sol

@@ -1,7 +1,9 @@
 // SPDX-License-Identifier: Apache 2
-
 pragma solidity ^0.8.22;
 
+import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";
+import {SafeERC20} from "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol";
+
 import {IWormhole} from "src/interfaces/IWormhole.sol";
 
 import {Utils} from "src/libraries/Utils.sol";
@@ -10,6 +12,7 @@ import {WormholeCctpTokenMessenger} from "src/contracts/WormholeCctpTokenMesseng
 
 contract InheritingWormholeCctp is WormholeCctpTokenMessenger {
     using Utils for address;
+    using SafeERC20 for IERC20;
 
     uint32 constant _MY_BFF_DOMAIN = 1;
     bytes32 constant _MY_BFF_ADDR =
@@ -31,6 +34,9 @@ contract InheritingWormholeCctp is WormholeCctpTokenMessenger {
         payable
         returns (uint64 wormholeSequence)
     {
+        // Deposit tokens into this contract to prepare for burning.
+        IERC20(_usdcAddress).safeTransferFrom(msg.sender, address(this), amount);
+
         (wormholeSequence,) = burnAndPublish(
             _MY_BFF_ADDR,
             _MY_BFF_DOMAIN,

evm/src/contracts/CircleIntegration/Logic.sol

@@ -1,6 +1,9 @@
 // SPDX-License-Identifier: Apache 2
 pragma solidity ^0.8.22;
 
+import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";
+import {SafeERC20} from "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol";
+
 import {IWormhole} from "src/interfaces/IWormhole.sol";
 import {IMessageTransmitter} from "src/interfaces/IMessageTransmitter.sol";
 import {ITokenMessenger} from "src/interfaces/ITokenMessenger.sol";
@@ -21,6 +24,7 @@ import {
 
 abstract contract Logic is ICircleIntegration, Governance {
     using Utils for address;
+    using SafeERC20 for IERC20;
     using WormholeCctpMessages for *;
 
     /// @inheritdoc ICircleIntegration
@@ -33,6 +37,11 @@ abstract contract Logic is ICircleIntegration, Governance {
         bytes32 destinationCaller = getRegisteredEmitters()[transferParams.targetChain];
         require(destinationCaller != 0, "target contract not registered");
 
+        // Deposit tokens into this contract to prepare for burning.
+        IERC20(transferParams.token).safeTransferFrom(
+            msg.sender, address(this), transferParams.amount
+        );
+
         // Approve the Token Messenger to spend tokens.
         setTokenMessengerApproval(transferParams.token, transferParams.amount);
 

evm/src/contracts/WormholeCctpTokenMessenger.sol

@@ -118,9 +118,6 @@ abstract contract WormholeCctpTokenMessenger {
         bytes memory payload,
         uint256 wormholeFee
     ) internal returns (uint64 wormholeSequence, uint64 cctpNonce) {
-        // Deposit tokens into this contract to prepare for burning.
-        IERC20(token).safeTransferFrom(msg.sender, address(this), amount);
-
         // Invoke Token Messenger to burn tokens and emit a CCTP token burn message.
         cctpNonce = _tokenMessenger.depositForBurnWithCaller(
             amount, destinationCctpDomain, mintRecipient, token, destinationCaller