From a8e2229b4e10fb6a3b1f920b7977566855ab3adb Mon Sep 17 00:00:00 2001 From: mkflow27 Date: Thu, 9 Jul 2026 18:56:48 +0000 Subject: [PATCH] [create-pull-request] automated change --- ...ppedAaveCore USDGErc4626VaultReview2f2a.md | 32 +++++++++++++++++++ erc4626/registry.json | 20 ++++++++++++ ...ppedAaveCore USDGRateProviderReviewe99c.md | 31 ++++++++++++++++++ rate-providers/registry.json | 20 +++++++++++- 4 files changed, 102 insertions(+), 1 deletion(-) create mode 100644 erc4626/WrappedAaveCore USDGErc4626VaultReview2f2a.md create mode 100644 rate-providers/WrappedAaveCore USDGRateProviderReviewe99c.md diff --git a/erc4626/WrappedAaveCore USDGErc4626VaultReview2f2a.md b/erc4626/WrappedAaveCore USDGErc4626VaultReview2f2a.md new file mode 100644 index 0000000..ff8db22 --- /dev/null +++ b/erc4626/WrappedAaveCore USDGErc4626VaultReview2f2a.md @@ -0,0 +1,32 @@ + +# Rate Provider: WrappedAave Core USDG rate provider + +## Details +This report was autogenerated on 09/07/2026. + +- Deployed at: + - [Ethereum:0xAC2435E3C25e8246870D33ce0a26988A46d5DB68](https://etherscan.io/address/0xAC2435E3C25e8246870D33ce0a26988A46d5DB68) +- Audit report(s): + - [Audits](https://aave.com/security) + +## Context +waCoreUSDG is the ERC4626 Tokenization Spoke for Aave V4's Core Spoke. Depositing USDG supplies it into the Aave V4 Liquidity Hub through the Core Spoke; the non-rebasing wrapped token accrues lending yield,so its USDG exchange rate increases over time. It is fully ERC4626 compliant. Available at https://pro.aave.com/. + +## Review Checklist: Bare Minimum Compatibility +Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use. + +- [x] Tests based on the [balancer-v3-monorepo](https://github.com/balancer/balancer-v3-monorepo/tree/main/pkg/vault/test/foundry/fork) pass for the given ERC4626 vaults, which can be found [here](https://github.com/balancer/balancer-v3-erc4626-tests/tree/main/test). +- [x] The required Vault implements the required operational ERC4626 Interface + +### Administrative Privileges +- [ ] The ERC4626 Vault is upgradeable** (e.g., via a proxy architecture). +- [x] Other contracts which are part of the `mint` callchain are upgradeable**. You can find more information + about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/f69068a9-9aee-449c-9e4e-d78e43cd1740) + +## Conclusion +**Summary judgment: USABLE** +Passing fork tests can be found at https://github.com/balancer/balancer-v3-erc4626-tests/pull/144. + +** upgradeable in this context means that: +- The contract is a proxy contract with an implementation sourced from Etherscan. + diff --git a/erc4626/registry.json b/erc4626/registry.json index 486526f..4626fdb 100644 --- a/erc4626/registry.json +++ b/erc4626/registry.json @@ -956,6 +956,26 @@ "canUseBufferForSwaps": true, "useUnderlyingForAddRemove": true, "useWrappedForAddRemove": true + }, + "0xAC2435E3C25e8246870D33ce0a26988A46d5DB68": { + "asset": "0xe343167631d89B6Ffc58B88d6b7fB0228795491D", + "name": "WrappedAaveCore USDGErc4626Vault.md", + "summary": "safe", + "review": "./WrappedAaveCore USDGErc4626VaultReview2f2a.md", + "warnings": [], + "upgradeableComponents": [ + { + "entrypoint": "0xcca852bc40e560adc3b1cc58ca5b55638ce826c9", + "implementationReviewed": "0xfe89fd96f270ac3c0f11921af0390dbb1340f704" + }, + { + "entrypoint": "0xac2435e3c25e8246870d33ce0a26988a46d5db68", + "implementationReviewed": "0x992266a94dff038ebc0e132c65c4536594326a21" + } + ], + "canUseBufferForSwaps": true, + "useUnderlyingForAddRemove": true, + "useWrappedForAddRemove": true } }, "gnosis": { diff --git a/rate-providers/WrappedAaveCore USDGRateProviderReviewe99c.md b/rate-providers/WrappedAaveCore USDGRateProviderReviewe99c.md new file mode 100644 index 0000000..58da553 --- /dev/null +++ b/rate-providers/WrappedAaveCore USDGRateProviderReviewe99c.md @@ -0,0 +1,31 @@ + +# Rate Provider: WrappedAave Core USDG rate provider + +## Details +This report was autogenerated on 09/07/2026. + +- Deployed at: + - [Ethereum:0x09425A7c3D25A0e743F5242f2769f776d5b70849](https://etherscan.io/address/0x09425A7c3D25A0e743F5242f2769f776d5b70849) +- Audit report(s): + - [Audits](https://aave.com/security) + +## Context +The rate provider reports the rate of waCoreUSDG in terms of its underlying USDG,sourced from the token's ERC4626 convertToAssets() exchange rate. + +## Review Checklist: Bare Minimum Compatibility +Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use. + +- [x] Implements the [`IRateProvider`](https://github.com/balancer/balancer-v2-monorepo/blob/bc3b3fee6e13e01d2efe610ed8118fdb74dfc1f2/pkg/interfaces/contracts/pool-utils/IRateProvider.sol) interface. +- [x] `getRate` returns an 18-decimal fixed point number (i.e., 1 == 1e18) regardless of underlying token decimals. + +### Administrative Privileges +- [ ] The Rate Provider is upgradeable** (e.g., via a proxy architecture). +- [x] Other contracts which are part of the `getRate` callchain are upgradeable**. You can find more information + about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/0f6fb9e4-0197-47a7-84d6-b218588a37b5) + +## Conclusion +**Summary judgment: USABLE** + +** upgradeable in this context means that: +- The contract is a proxy contract with an implementation sourced from Etherscan and the proxy emitted an "Upgraded" event. + diff --git a/rate-providers/registry.json b/rate-providers/registry.json index 81765de..d7d32ad 100644 --- a/rate-providers/registry.json +++ b/rate-providers/registry.json @@ -2852,6 +2852,24 @@ "implementationReviewed": "0xe6e024d77bded06b6b38593886f5441dfe020923" } ] + }, + "0x09425A7c3D25A0e743F5242f2769f776d5b70849": { + "asset": "0xAC2435E3C25e8246870D33ce0a26988A46d5DB68", + "name": "WrappedAaveCore USDGRateProvider.md", + "summary": "safe", + "review": "./WrappedAaveCore USDGRateProviderReviewe99c.md", + "warnings": [], + "factory": "", + "upgradeableComponents": [ + { + "entrypoint": "0xcca852bc40e560adc3b1cc58ca5b55638ce826c9", + "implementationReviewed": "0xfe89fd96f270ac3c0f11921af0390dbb1340f704" + }, + { + "entrypoint": "0xac2435e3c25e8246870d33ce0a26988a46d5db68", + "implementationReviewed": "0x992266a94dff038ebc0e132c65c4536594326a21" + } + ] } }, "fantom": {}, @@ -5121,4 +5139,4 @@ ] } } -} +} \ No newline at end of file