Review: Rate Provider from Issue #762

erc4626/WrappedAaveCore GHOErc4626VaultReview89ec.md

@@ -0,0 +1,32 @@
+
+# Rate Provider: WrappedAave Core GHO rate provider
+
+## Details
+This report was autogenerated on 09/07/2026.
+
+- Deployed at:
+    - [Ethereum:0x58C14a5E061c9bC6926c5b853445290F296C2F7B](https://etherscan.io/address/0x58C14a5E061c9bC6926c5b853445290F296C2F7B)
+- Audit report(s):
+    - [Audits](https://aave.com/security)
+
+## Context
+waCoreGHO is the ERC4626 Tokenization Spoke for Aave V4's Core Spoke. Depositing GHO supplies it into the Aave V4 Liquidity Hub through the Core Spoke; the non-rebasing wrapped token accrues lending yield,so its GHO exchange rate increases over time. It is fully ERC4626 compliant. Available at https://pro.aave.com/.
+
+## Review Checklist: Bare Minimum Compatibility
+Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use.
+
+- [x] Tests based on the [balancer-v3-monorepo](https://github.com/balancer/balancer-v3-monorepo/tree/main/pkg/vault/test/foundry/fork) pass for the given ERC4626 vaults, which can be found [here](https://github.com/balancer/balancer-v3-erc4626-tests/tree/main/test).
+- [x] The required Vault implements the required operational ERC4626 Interface
+
+### Administrative Privileges
+- [ ] The ERC4626 Vault is upgradeable** (e.g., via a proxy architecture).
+- [x] Other contracts which are part of the `mint` callchain are upgradeable**. You can find more information
+   about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/eac8157c-b007-4297-8b44-f0c9752a6afc)
+
+## Conclusion
+**Summary judgment: USABLE**
+Passing fork tests can be found at https://github.com/balancer/balancer-v3-erc4626-tests/pull/144.
+
+** upgradeable in this context means that:
+- The contract is a proxy contract with an implementation sourced from Etherscan.
+

erc4626/registry.json

@@ -957,20 +957,20 @@
       "useUnderlyingForAddRemove": true,
       "useWrappedForAddRemove": true
     },
-    "0x5eC44a70F309854fe04d495cFE1B5dA63DD1cc73": {
-      "asset": "0xdAC17F958D2ee523a2206206994597C13D831ec7",
-      "name": "WrappedAaveCore USDTErc4626Vault.md",
+    "0x58C14a5E061c9bC6926c5b853445290F296C2F7B": {
+      "asset": "0x40D16FC0246aD3160Ccc09B8D0D3A2cD28aE6C2f",
+      "name": "WrappedAaveCore GHOErc4626Vault.md",
       "summary": "safe",
-      "review": "./WrappedAaveCore USDTErc4626VaultReviewe83b.md",
+      "review": "./WrappedAaveCore GHOErc4626VaultReview89ec.md",
       "warnings": [],
       "upgradeableComponents": [
-        {
-          "entrypoint": "0x5ec44a70f309854fe04d495cfe1b5da63dd1cc73",
-          "implementationReviewed": "0x03d5f18fdf82c2a9ea32a7a731e18b2544f6ebe8"
-        },
         {
           "entrypoint": "0xcca852bc40e560adc3b1cc58ca5b55638ce826c9",
           "implementationReviewed": "0xfe89fd96f270ac3c0f11921af0390dbb1340f704"
+        },
+        {
+          "entrypoint": "0x58c14a5e061c9bc6926c5b853445290f296c2f7b",
+          "implementationReviewed": "0xdd0927be9d412ae8d44b49c53c034f5e5eea1cfa"
         }
       ],
       "canUseBufferForSwaps": true,

rate-providers/WrappedAaveCore GHORateProviderReviewb573.md

@@ -0,0 +1,31 @@
+
+# Rate Provider: WrappedAave Core GHO rate provider
+
+## Details
+This report was autogenerated on 09/07/2026.
+
+- Deployed at:
+    - [Ethereum:0x46C966f8f31DD512f830B30a00bcad36F9C86318](https://etherscan.io/address/0x46C966f8f31DD512f830B30a00bcad36F9C86318)
+- Audit report(s):
+    - [Audits](https://aave.com/security)
+
+## Context
+The rate provider reports the rate of waCoreGHO in terms of its underlying GHO,sourced from the token's ERC4626 convertToAssets() exchange rate.
+
+## Review Checklist: Bare Minimum Compatibility
+Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use.
+
+- [x] Implements the [`IRateProvider`](https://github.com/balancer/balancer-v2-monorepo/blob/bc3b3fee6e13e01d2efe610ed8118fdb74dfc1f2/pkg/interfaces/contracts/pool-utils/IRateProvider.sol) interface.
+- [x] `getRate` returns an 18-decimal fixed point number (i.e., 1 == 1e18) regardless of underlying token decimals.
+
+### Administrative Privileges
+- [ ] The Rate Provider is upgradeable** (e.g., via a proxy architecture).
+- [x] Other contracts which are part of the `getRate` callchain are upgradeable**. You can find more information
+   about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/e76e60c2-006f-466b-9208-f7524db1d1b7)
+
+## Conclusion
+**Summary judgment: USABLE**
+
+** upgradeable in this context means that:
+- The contract is a proxy contract with an implementation sourced from Etherscan and the proxy emitted an "Upgraded" event.
+

rate-providers/registry.json

@@ -2853,21 +2853,21 @@
         }
       ]
     },
-    "0x03905d9877f5aF95B520AcB33a2733BAF26D87dd": {
-      "asset": "0x5eC44a70F309854fe04d495cFE1B5dA63DD1cc73",
-      "name": "WrappedAaveCore USDTRateProvider.md",
+    "0x46C966f8f31DD512f830B30a00bcad36F9C86318": {
+      "asset": "0x58C14a5E061c9bC6926c5b853445290F296C2F7B",
+      "name": "WrappedAaveCore GHORateProvider.md",
       "summary": "safe",
-      "review": "./WrappedAaveCore USDTRateProviderReviewf5cc.md",
+      "review": "./WrappedAaveCore GHORateProviderReviewb573.md",
       "warnings": [],
       "factory": "",
       "upgradeableComponents": [
         {
-          "entrypoint": "0xcca852bc40e560adc3b1cc58ca5b55638ce826c9",
-          "implementationReviewed": "0xfe89fd96f270ac3c0f11921af0390dbb1340f704"
+          "entrypoint": "0x58c14a5e061c9bc6926c5b853445290f296c2f7b",
+          "implementationReviewed": "0xdd0927be9d412ae8d44b49c53c034f5e5eea1cfa"
         },
         {
-          "entrypoint": "0x5ec44a70f309854fe04d495cfe1b5da63dd1cc73",
-          "implementationReviewed": "0x03d5f18fdf82c2a9ea32a7a731e18b2544f6ebe8"
+          "entrypoint": "0xcca852bc40e560adc3b1cc58ca5b55638ce826c9",
+          "implementationReviewed": "0xfe89fd96f270ac3c0f11921af0390dbb1340f704"
         }
       ]
     }