Review: Rate Provider from Issue #763

erc4626/WrappedAaveCore USDGErc4626VaultReview2f2a.md

@@ -0,0 +1,32 @@
+
+# Rate Provider: WrappedAave Core USDG rate provider
+
+## Details
+This report was autogenerated on 09/07/2026.
+
+- Deployed at:
+    - [Ethereum:0xAC2435E3C25e8246870D33ce0a26988A46d5DB68](https://etherscan.io/address/0xAC2435E3C25e8246870D33ce0a26988A46d5DB68)
+- Audit report(s):
+    - [Audits](https://aave.com/security)
+
+## Context
+waCoreUSDG is the ERC4626 Tokenization Spoke for Aave V4's Core Spoke. Depositing USDG supplies it into the Aave V4 Liquidity Hub through the Core Spoke; the non-rebasing wrapped token accrues lending yield,so its USDG exchange rate increases over time. It is fully ERC4626 compliant. Available at https://pro.aave.com/.
+
+## Review Checklist: Bare Minimum Compatibility
+Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use.
+
+- [x] Tests based on the [balancer-v3-monorepo](https://github.com/balancer/balancer-v3-monorepo/tree/main/pkg/vault/test/foundry/fork) pass for the given ERC4626 vaults, which can be found [here](https://github.com/balancer/balancer-v3-erc4626-tests/tree/main/test).
+- [x] The required Vault implements the required operational ERC4626 Interface
+
+### Administrative Privileges
+- [ ] The ERC4626 Vault is upgradeable** (e.g., via a proxy architecture).
+- [x] Other contracts which are part of the `mint` callchain are upgradeable**. You can find more information
+   about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/f69068a9-9aee-449c-9e4e-d78e43cd1740)
+
+## Conclusion
+**Summary judgment: USABLE**
+Passing fork tests can be found at https://github.com/balancer/balancer-v3-erc4626-tests/pull/144.
+
+** upgradeable in this context means that:
+- The contract is a proxy contract with an implementation sourced from Etherscan.
+

erc4626/registry.json

@@ -956,6 +956,26 @@
       "canUseBufferForSwaps": true,
       "useUnderlyingForAddRemove": true,
       "useWrappedForAddRemove": true
+    },
+    "0xAC2435E3C25e8246870D33ce0a26988A46d5DB68": {
+      "asset": "0xe343167631d89B6Ffc58B88d6b7fB0228795491D",
+      "name": "WrappedAaveCore USDGErc4626Vault.md",
+      "summary": "safe",
+      "review": "./WrappedAaveCore USDGErc4626VaultReview2f2a.md",
+      "warnings": [],
+      "upgradeableComponents": [
+        {
+          "entrypoint": "0xcca852bc40e560adc3b1cc58ca5b55638ce826c9",
+          "implementationReviewed": "0xfe89fd96f270ac3c0f11921af0390dbb1340f704"
+        },
+        {
+          "entrypoint": "0xac2435e3c25e8246870d33ce0a26988a46d5db68",
+          "implementationReviewed": "0x992266a94dff038ebc0e132c65c4536594326a21"
+        }
+      ],
+      "canUseBufferForSwaps": true,
+      "useUnderlyingForAddRemove": true,
+      "useWrappedForAddRemove": true
     }
   },
   "gnosis": {

rate-providers/WrappedAaveCore USDGRateProviderReviewe99c.md

@@ -0,0 +1,31 @@
+
+# Rate Provider: WrappedAave Core USDG rate provider
+
+## Details
+This report was autogenerated on 09/07/2026.
+
+- Deployed at:
+    - [Ethereum:0x09425A7c3D25A0e743F5242f2769f776d5b70849](https://etherscan.io/address/0x09425A7c3D25A0e743F5242f2769f776d5b70849)
+- Audit report(s):
+    - [Audits](https://aave.com/security)
+
+## Context
+The rate provider reports the rate of waCoreUSDG in terms of its underlying USDG,sourced from the token's ERC4626 convertToAssets() exchange rate.
+
+## Review Checklist: Bare Minimum Compatibility
+Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use.
+
+- [x] Implements the [`IRateProvider`](https://github.com/balancer/balancer-v2-monorepo/blob/bc3b3fee6e13e01d2efe610ed8118fdb74dfc1f2/pkg/interfaces/contracts/pool-utils/IRateProvider.sol) interface.
+- [x] `getRate` returns an 18-decimal fixed point number (i.e., 1 == 1e18) regardless of underlying token decimals.
+
+### Administrative Privileges
+- [ ] The Rate Provider is upgradeable** (e.g., via a proxy architecture).
+- [x] Other contracts which are part of the `getRate` callchain are upgradeable**. You can find more information
+   about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/0f6fb9e4-0197-47a7-84d6-b218588a37b5)
+
+## Conclusion
+**Summary judgment: USABLE**
+
+** upgradeable in this context means that:
+- The contract is a proxy contract with an implementation sourced from Etherscan and the proxy emitted an "Upgraded" event.
+

rate-providers/registry.json

@@ -2852,6 +2852,24 @@
           "implementationReviewed": "0xe6e024d77bded06b6b38593886f5441dfe020923"
         }
       ]
+    },
+    "0x09425A7c3D25A0e743F5242f2769f776d5b70849": {
+      "asset": "0xAC2435E3C25e8246870D33ce0a26988A46d5DB68",
+      "name": "WrappedAaveCore USDGRateProvider.md",
+      "summary": "safe",
+      "review": "./WrappedAaveCore USDGRateProviderReviewe99c.md",
+      "warnings": [],
+      "factory": "",
+      "upgradeableComponents": [
+        {
+          "entrypoint": "0xcca852bc40e560adc3b1cc58ca5b55638ce826c9",
+          "implementationReviewed": "0xfe89fd96f270ac3c0f11921af0390dbb1340f704"
+        },
+        {
+          "entrypoint": "0xac2435e3c25e8246870d33ce0a26988a46d5db68",
+          "implementationReviewed": "0x992266a94dff038ebc0e132c65c4536594326a21"
+        }
+      ]
     }
   },
   "fantom": {},
@@ -5121,4 +5139,4 @@
       ]
     }
   }
-}
+}