Review: Rate Provider from Issue #771

erc4626/WrappedAaveCore USDCErc4626VaultReview4ffa.md

@@ -0,0 +1,32 @@
+
+# Rate Provider: WrappedAave Core USDC rate provider
+
+## Details
+This report was autogenerated on 16/07/2026.
+
+- Deployed at:
+    - [Avalanche:0x01D7f7B7CE2123192fECC20bd1caF3e4d9e4C10D](https://snowtrace.io/address/0x01D7f7B7CE2123192fECC20bd1caF3e4d9e4C10D)
+- Audit report(s):
+    - [Audits](https://aave.com/security)
+
+## Context
+waCoreUSDC is the ERC4626 Tokenization Spoke for Aave V4's Core Spoke. Depositing USDC supplies it into the Aave V4 Liquidity Hub through the Core Spoke; the non-rebasing wrapped token accrues lending yield,so its USDC exchange rate increases over time. It is fully ERC4626 compliant. Available at https://pro.aave.com/.
+
+## Review Checklist: Bare Minimum Compatibility
+Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use.
+
+- [x] Tests based on the [balancer-v3-monorepo](https://github.com/balancer/balancer-v3-monorepo/tree/main/pkg/vault/test/foundry/fork) pass for the given ERC4626 vaults, which can be found [here](https://github.com/balancer/balancer-v3-erc4626-tests/tree/main/test).
+- [x] The required Vault implements the required operational ERC4626 Interface
+
+### Administrative Privileges
+- [x] The ERC4626 Vault is upgradeable** (e.g., via a proxy architecture).
+- [x] Other contracts which are part of the `mint` callchain are upgradeable**. You can find more information
+   about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/633218cd-bbd3-49e5-9237-44a20074cdd1)
+
+## Conclusion
+**Summary judgment: USABLE**
+Passing fork tests can be found at https://github.com/balancer/balancer-v3-erc4626-tests/pull/145.
+
+** upgradeable in this context means that:
+- The contract is a proxy contract with an implementation sourced from Etherscan.
+

erc4626/registry.json

@@ -2014,6 +2014,30 @@
       "canUseBufferForSwaps": true,
       "useUnderlyingForAddRemove": true,
       "useWrappedForAddRemove": true
+    },
+    "0x01D7f7B7CE2123192fECC20bd1caF3e4d9e4C10D": {
+      "asset": "0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E",
+      "name": "WrappedAaveCore USDCErc4626Vault.md",
+      "summary": "safe",
+      "review": "./WrappedAaveCore USDCErc4626VaultReview4ffa.md",
+      "warnings": [],
+      "upgradeableComponents": [
+        {
+          "entrypoint": "0x01d7f7b7ce2123192fecc20bd1caf3e4d9e4c10d",
+          "implementationReviewed": "0x5fc83e3304ad94d085a2dc3c658b49065879c811"
+        },
+        {
+          "entrypoint": "0xd07369fae4a5bb13c9ce446b052c7867b1abdf6e",
+          "implementationReviewed": "0xfacde4e3f0368e15f767d9e2db0b67817af52c1c"
+        },
+        {
+          "entrypoint": "0x01D7f7B7CE2123192fECC20bd1caF3e4d9e4C10D",
+          "implementationReviewed": "0x5fc83e3304ad94d085a2dc3c658b49065879c811"
+        }
+      ],
+      "canUseBufferForSwaps": true,
+      "useUnderlyingForAddRemove": true,
+      "useWrappedForAddRemove": true
     }
   },
   "sepolia": {
@@ -3157,4 +3181,4 @@
       "useWrappedForAddRemove": true
     }
   }
-}
+}

rate-providers/WrappedAaveCore USDCRateProviderReview77d6.md

@@ -0,0 +1,31 @@
+
+# Rate Provider: WrappedAave Core USDC rate provider
+
+## Details
+This report was autogenerated on 16/07/2026.
+
+- Deployed at:
+    - [Avalanche:0x6c7011f695c3BBAB9492E7e71A8aEa2A44211750](https://snowtrace.io/address/0x6c7011f695c3BBAB9492E7e71A8aEa2A44211750)
+- Audit report(s):
+    - [Audits](https://aave.com/security)
+
+## Context
+The rate provider reports the rate of waCoreUSDC in terms of its underlying USDC,sourced from the token's ERC4626 convertToAssets() exchange rate.
+
+## Review Checklist: Bare Minimum Compatibility
+Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use.
+
+- [x] Implements the [`IRateProvider`](https://github.com/balancer/balancer-v2-monorepo/blob/bc3b3fee6e13e01d2efe610ed8118fdb74dfc1f2/pkg/interfaces/contracts/pool-utils/IRateProvider.sol) interface.
+- [x] `getRate` returns an 18-decimal fixed point number (i.e., 1 == 1e18) regardless of underlying token decimals.
+
+### Administrative Privileges
+- [ ] The Rate Provider is upgradeable** (e.g., via a proxy architecture).
+- [x] Other contracts which are part of the `getRate` callchain are upgradeable**. You can find more information
+   about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/24b3eb4c-44f5-4185-8138-69658063a388)
+
+## Conclusion
+**Summary judgment: USABLE**
+
+** upgradeable in this context means that:
+- The contract is a proxy contract with an implementation sourced from Etherscan and the proxy emitted an "Upgraded" event.
+

rate-providers/registry.json

@@ -1044,6 +1044,24 @@
       "warnings": [],
       "factory": "",
       "upgradeableComponents": []
+    },
+    "0x6c7011f695c3BBAB9492E7e71A8aEa2A44211750": {
+      "asset": "0x01D7f7B7CE2123192fECC20bd1caF3e4d9e4C10D",
+      "name": "WrappedAaveCore USDCRateProvider.md",
+      "summary": "safe",
+      "review": "./WrappedAaveCore USDCRateProviderReview77d6.md",
+      "warnings": [],
+      "factory": "",
+      "upgradeableComponents": [
+        {
+          "entrypoint": "0x01d7f7b7ce2123192fecc20bd1caf3e4d9e4c10d",
+          "implementationReviewed": "0x5fc83e3304ad94d085a2dc3c658b49065879c811"
+        },
+        {
+          "entrypoint": "0xd07369fae4a5bb13c9ce446b052c7867b1abdf6e",
+          "implementationReviewed": "0xfacde4e3f0368e15f767d9e2db0b67817af52c1c"
+        }
+      ]
     }
   },
   "base": {
@@ -5193,4 +5211,4 @@
       ]
     }
   }
-}
+}