From c2c49f865726895366b8af10aa086e2a200c6d15 Mon Sep 17 00:00:00 2001 From: mkflow27 Date: Thu, 9 Jul 2026 18:56:49 +0000 Subject: [PATCH] [create-pull-request] automated change --- ...ppedAaveCore USDTErc4626VaultReviewe83b.md | 32 +++++++++++++++++++ erc4626/registry.json | 20 ++++++++++++ ...ppedAaveCore USDTRateProviderReviewf5cc.md | 31 ++++++++++++++++++ rate-providers/registry.json | 20 +++++++++++- 4 files changed, 102 insertions(+), 1 deletion(-) create mode 100644 erc4626/WrappedAaveCore USDTErc4626VaultReviewe83b.md create mode 100644 rate-providers/WrappedAaveCore USDTRateProviderReviewf5cc.md diff --git a/erc4626/WrappedAaveCore USDTErc4626VaultReviewe83b.md b/erc4626/WrappedAaveCore USDTErc4626VaultReviewe83b.md new file mode 100644 index 0000000..7f5400e --- /dev/null +++ b/erc4626/WrappedAaveCore USDTErc4626VaultReviewe83b.md @@ -0,0 +1,32 @@ + +# Rate Provider: WrappedAave Core USDT rate provider + +## Details +This report was autogenerated on 09/07/2026. + +- Deployed at: + - [Ethereum:0x5eC44a70F309854fe04d495cFE1B5dA63DD1cc73](https://etherscan.io/address/0x5eC44a70F309854fe04d495cFE1B5dA63DD1cc73) +- Audit report(s): + - [Audits](https://aave.com/security) + +## Context +waCoreUSDT is the ERC4626 Tokenization Spoke for Aave V4's Core Spoke. Depositing USDT supplies it into the Aave V4 Liquidity Hub through the Core Spoke; the non-rebasing wrapped token accrues lending yield,so its USDT exchange rate increases over time. It is fully ERC4626 compliant. Available at https://pro.aave.com/. + +## Review Checklist: Bare Minimum Compatibility +Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use. + +- [x] Tests based on the [balancer-v3-monorepo](https://github.com/balancer/balancer-v3-monorepo/tree/main/pkg/vault/test/foundry/fork) pass for the given ERC4626 vaults, which can be found [here](https://github.com/balancer/balancer-v3-erc4626-tests/tree/main/test). +- [x] The required Vault implements the required operational ERC4626 Interface + +### Administrative Privileges +- [ ] The ERC4626 Vault is upgradeable** (e.g., via a proxy architecture). +- [x] Other contracts which are part of the `mint` callchain are upgradeable**. You can find more information + about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/1857f818-d860-470e-9ea4-0c983371ebc8) + +## Conclusion +**Summary judgment: USABLE** +Passing fork tests can be found at https://github.com/balancer/balancer-v3-erc4626-tests/pull/144. + +** upgradeable in this context means that: +- The contract is a proxy contract with an implementation sourced from Etherscan. + diff --git a/erc4626/registry.json b/erc4626/registry.json index 486526f..b7c1c33 100644 --- a/erc4626/registry.json +++ b/erc4626/registry.json @@ -956,6 +956,26 @@ "canUseBufferForSwaps": true, "useUnderlyingForAddRemove": true, "useWrappedForAddRemove": true + }, + "0x5eC44a70F309854fe04d495cFE1B5dA63DD1cc73": { + "asset": "0xdAC17F958D2ee523a2206206994597C13D831ec7", + "name": "WrappedAaveCore USDTErc4626Vault.md", + "summary": "safe", + "review": "./WrappedAaveCore USDTErc4626VaultReviewe83b.md", + "warnings": [], + "upgradeableComponents": [ + { + "entrypoint": "0x5ec44a70f309854fe04d495cfe1b5da63dd1cc73", + "implementationReviewed": "0x03d5f18fdf82c2a9ea32a7a731e18b2544f6ebe8" + }, + { + "entrypoint": "0xcca852bc40e560adc3b1cc58ca5b55638ce826c9", + "implementationReviewed": "0xfe89fd96f270ac3c0f11921af0390dbb1340f704" + } + ], + "canUseBufferForSwaps": true, + "useUnderlyingForAddRemove": true, + "useWrappedForAddRemove": true } }, "gnosis": { diff --git a/rate-providers/WrappedAaveCore USDTRateProviderReviewf5cc.md b/rate-providers/WrappedAaveCore USDTRateProviderReviewf5cc.md new file mode 100644 index 0000000..c519d40 --- /dev/null +++ b/rate-providers/WrappedAaveCore USDTRateProviderReviewf5cc.md @@ -0,0 +1,31 @@ + +# Rate Provider: WrappedAave Core USDT rate provider + +## Details +This report was autogenerated on 09/07/2026. + +- Deployed at: + - [Ethereum:0x03905d9877f5aF95B520AcB33a2733BAF26D87dd](https://etherscan.io/address/0x03905d9877f5aF95B520AcB33a2733BAF26D87dd) +- Audit report(s): + - [Audits](https://aave.com/security) + +## Context +The rate provider reports the rate of waCoreUSDT in terms of its underlying USDT,sourced from the token's ERC4626 convertToAssets() exchange rate. + +## Review Checklist: Bare Minimum Compatibility +Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use. + +- [x] Implements the [`IRateProvider`](https://github.com/balancer/balancer-v2-monorepo/blob/bc3b3fee6e13e01d2efe610ed8118fdb74dfc1f2/pkg/interfaces/contracts/pool-utils/IRateProvider.sol) interface. +- [x] `getRate` returns an 18-decimal fixed point number (i.e., 1 == 1e18) regardless of underlying token decimals. + +### Administrative Privileges +- [ ] The Rate Provider is upgradeable** (e.g., via a proxy architecture). +- [x] Other contracts which are part of the `getRate` callchain are upgradeable**. You can find more information + about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/88d98411-5d8d-4e18-99cf-1dc158769a36) + +## Conclusion +**Summary judgment: USABLE** + +** upgradeable in this context means that: +- The contract is a proxy contract with an implementation sourced from Etherscan and the proxy emitted an "Upgraded" event. + diff --git a/rate-providers/registry.json b/rate-providers/registry.json index 81765de..e871359 100644 --- a/rate-providers/registry.json +++ b/rate-providers/registry.json @@ -2852,6 +2852,24 @@ "implementationReviewed": "0xe6e024d77bded06b6b38593886f5441dfe020923" } ] + }, + "0x03905d9877f5aF95B520AcB33a2733BAF26D87dd": { + "asset": "0x5eC44a70F309854fe04d495cFE1B5dA63DD1cc73", + "name": "WrappedAaveCore USDTRateProvider.md", + "summary": "safe", + "review": "./WrappedAaveCore USDTRateProviderReviewf5cc.md", + "warnings": [], + "factory": "", + "upgradeableComponents": [ + { + "entrypoint": "0xcca852bc40e560adc3b1cc58ca5b55638ce826c9", + "implementationReviewed": "0xfe89fd96f270ac3c0f11921af0390dbb1340f704" + }, + { + "entrypoint": "0x5ec44a70f309854fe04d495cfe1b5da63dd1cc73", + "implementationReviewed": "0x03d5f18fdf82c2a9ea32a7a731e18b2544f6ebe8" + } + ] } }, "fantom": {}, @@ -5121,4 +5139,4 @@ ] } } -} +} \ No newline at end of file