From 190bc2c3e0f722af0c579daf1d22ae8396956ff1 Mon Sep 17 00:00:00 2001 From: mkflow27 Date: Thu, 9 Jul 2026 18:58:45 +0000 Subject: [PATCH] [create-pull-request] automated change --- ...ppedAaveCore USDCErc4626VaultReview5a17.md | 32 +++++++++++++++++++ erc4626/registry.json | 20 ++++++++++++ ...ppedAaveCore USDCRateProviderReview0b4b.md | 31 ++++++++++++++++++ rate-providers/registry.json | 20 +++++++++++- 4 files changed, 102 insertions(+), 1 deletion(-) create mode 100644 erc4626/WrappedAaveCore USDCErc4626VaultReview5a17.md create mode 100644 rate-providers/WrappedAaveCore USDCRateProviderReview0b4b.md diff --git a/erc4626/WrappedAaveCore USDCErc4626VaultReview5a17.md b/erc4626/WrappedAaveCore USDCErc4626VaultReview5a17.md new file mode 100644 index 0000000..8a9939f --- /dev/null +++ b/erc4626/WrappedAaveCore USDCErc4626VaultReview5a17.md @@ -0,0 +1,32 @@ + +# Rate Provider: WrappedAave Core USDC rate provider + +## Details +This report was autogenerated on 09/07/2026. + +- Deployed at: + - [Ethereum:0x531E90a2376902DE8915789Fcc1075e3B0c153E7](https://etherscan.io/address/0x531E90a2376902DE8915789Fcc1075e3B0c153E7) +- Audit report(s): + - [Audits](https://aave.com/security) + +## Context +waCoreUSDC is the ERC4626 Tokenization Spoke for Aave V4's Core Spoke. Depositing USDC supplies it into the Aave V4 Liquidity Hub through the Core Spoke; the non-rebasing wrapped token accrues lending yield,so its USDC exchange rate increases over time. It is fully ERC4626 compliant. Available at https://pro.aave.com/. + +## Review Checklist: Bare Minimum Compatibility +Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use. + +- [x] Tests based on the [balancer-v3-monorepo](https://github.com/balancer/balancer-v3-monorepo/tree/main/pkg/vault/test/foundry/fork) pass for the given ERC4626 vaults, which can be found [here](https://github.com/balancer/balancer-v3-erc4626-tests/tree/main/test). +- [x] The required Vault implements the required operational ERC4626 Interface + +### Administrative Privileges +- [ ] The ERC4626 Vault is upgradeable** (e.g., via a proxy architecture). +- [x] Other contracts which are part of the `mint` callchain are upgradeable**. You can find more information + about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/0b10c28e-4234-4eb1-960b-758e6aa9b170) + +## Conclusion +**Summary judgment: USABLE** +Passing fork tests can be found at https://github.com/balancer/balancer-v3-erc4626-tests/pull/144. + +** upgradeable in this context means that: +- The contract is a proxy contract with an implementation sourced from Etherscan. + diff --git a/erc4626/registry.json b/erc4626/registry.json index 486526f..334308f 100644 --- a/erc4626/registry.json +++ b/erc4626/registry.json @@ -956,6 +956,26 @@ "canUseBufferForSwaps": true, "useUnderlyingForAddRemove": true, "useWrappedForAddRemove": true + }, + "0x531E90a2376902DE8915789Fcc1075e3B0c153E7": { + "asset": "0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48", + "name": "WrappedAaveCore USDCErc4626Vault.md", + "summary": "safe", + "review": "./WrappedAaveCore USDCErc4626VaultReview5a17.md", + "warnings": [], + "upgradeableComponents": [ + { + "entrypoint": "0xcca852bc40e560adc3b1cc58ca5b55638ce826c9", + "implementationReviewed": "0xfe89fd96f270ac3c0f11921af0390dbb1340f704" + }, + { + "entrypoint": "0x531e90a2376902de8915789fcc1075e3b0c153e7", + "implementationReviewed": "0x1ee96dcb226cccf609c80dc394badcbf47d05326" + } + ], + "canUseBufferForSwaps": true, + "useUnderlyingForAddRemove": true, + "useWrappedForAddRemove": true } }, "gnosis": { diff --git a/rate-providers/WrappedAaveCore USDCRateProviderReview0b4b.md b/rate-providers/WrappedAaveCore USDCRateProviderReview0b4b.md new file mode 100644 index 0000000..779df72 --- /dev/null +++ b/rate-providers/WrappedAaveCore USDCRateProviderReview0b4b.md @@ -0,0 +1,31 @@ + +# Rate Provider: WrappedAave Core USDC rate provider + +## Details +This report was autogenerated on 09/07/2026. + +- Deployed at: + - [Ethereum:0x0E6013eb5540dbF81e19Fb76674CeC59b2a242a4](https://etherscan.io/address/0x0E6013eb5540dbF81e19Fb76674CeC59b2a242a4) +- Audit report(s): + - [Audits](https://aave.com/security) + +## Context +The rate provider reports the rate of waCoreUSDC in terms of its underlying USDC,sourced from the token's ERC4626 convertToAssets() exchange rate. + +## Review Checklist: Bare Minimum Compatibility +Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use. + +- [x] Implements the [`IRateProvider`](https://github.com/balancer/balancer-v2-monorepo/blob/bc3b3fee6e13e01d2efe610ed8118fdb74dfc1f2/pkg/interfaces/contracts/pool-utils/IRateProvider.sol) interface. +- [x] `getRate` returns an 18-decimal fixed point number (i.e., 1 == 1e18) regardless of underlying token decimals. + +### Administrative Privileges +- [ ] The Rate Provider is upgradeable** (e.g., via a proxy architecture). +- [x] Other contracts which are part of the `getRate` callchain are upgradeable**. You can find more information + about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/1f5d6ef5-e033-471a-9d06-1244595dcd5e) + +## Conclusion +**Summary judgment: USABLE** + +** upgradeable in this context means that: +- The contract is a proxy contract with an implementation sourced from Etherscan and the proxy emitted an "Upgraded" event. + diff --git a/rate-providers/registry.json b/rate-providers/registry.json index 81765de..9a3e3c6 100644 --- a/rate-providers/registry.json +++ b/rate-providers/registry.json @@ -2852,6 +2852,24 @@ "implementationReviewed": "0xe6e024d77bded06b6b38593886f5441dfe020923" } ] + }, + "0x0E6013eb5540dbF81e19Fb76674CeC59b2a242a4": { + "asset": "0x531E90a2376902DE8915789Fcc1075e3B0c153E7", + "name": "WrappedAaveCore USDCRateProvider.md", + "summary": "safe", + "review": "./WrappedAaveCore USDCRateProviderReview0b4b.md", + "warnings": [], + "factory": "", + "upgradeableComponents": [ + { + "entrypoint": "0xcca852bc40e560adc3b1cc58ca5b55638ce826c9", + "implementationReviewed": "0xfe89fd96f270ac3c0f11921af0390dbb1340f704" + }, + { + "entrypoint": "0x531e90a2376902de8915789fcc1075e3b0c153e7", + "implementationReviewed": "0x1ee96dcb226cccf609c80dc394badcbf47d05326" + } + ] } }, "fantom": {}, @@ -5121,4 +5139,4 @@ ] } } -} +} \ No newline at end of file