Section 16 • Developer Reference, Security & Legal
~5 min read•16 of 20
Vault-isolated token approvals, router whitelist, and call-injection defenses
Traditional DEX aggregators combine swap routing and token allowances in a single contract. If the routing contract has a vulnerability, all approved user tokens can be drained. TribFi separates these components into TribFiAggregator.sol and TribFiAllowanceTarget.sol.
TribFiAllowanceTarget.sol only permits token transfers to an immutable whitelist of verified DEX routers (Uniswap V2, Aerodrome, SushiSwap). It rejects arbitrary transfer calls.
Every swap calldata payload is strictly decoded and validated to prevent arbitrary external calls or target hijacking.