diff --git a/java/google/registry/flows/ResourceTransferCancelFlow.java b/java/google/registry/flows/ResourceTransferCancelFlow.java
index 2ccd18b58..9925482ba 100644
--- a/java/google/registry/flows/ResourceTransferCancelFlow.java
+++ b/java/google/registry/flows/ResourceTransferCancelFlow.java
@@ -39,7 +39,6 @@ public abstract class ResourceTransferCancelFlow
   /** Verify that this is the correct client to cancel this pending transfer. */
   @Override
   protected final void verifyPendingTransferMutationAllowed() throws EppException {
-    // TODO(b/18997997): Determine if authInfo is necessary to cancel a transfer.
     if (!getClientId().equals(existingResource.getTransferData().getGainingClientId())) {
       throw new NotTransferInitiatorException();
     }
diff --git a/java/google/registry/flows/contact/ContactTransferCancelFlow.java b/java/google/registry/flows/contact/ContactTransferCancelFlow.java
index 6224132ae..3e02035d4 100644
--- a/java/google/registry/flows/contact/ContactTransferCancelFlow.java
+++ b/java/google/registry/flows/contact/ContactTransferCancelFlow.java
@@ -71,11 +71,9 @@ public class ContactTransferCancelFlow extends LoggedInFlow implements Transacti
       throw new ResourceToMutateDoesNotExistException(ContactResource.class, targetId);
     }
     verifyOptionalAuthInfoForResource(authInfo, existingResource);
-    // Fail if object doesn't have a pending transfer, or if authinfo doesn't match. */
     if (existingResource.getTransferData().getTransferStatus() != TransferStatus.PENDING) {
       throw new NotPendingTransferException(targetId);
     }
-    // TODO(b/18997997): Determine if authInfo is necessary to cancel a transfer.
     if (!clientId.equals(existingResource.getTransferData().getGainingClientId())) {
       throw new NotTransferInitiatorException();
     }