From f0c8d41f943597f252bf2dc0d205384488e135b5 Mon Sep 17 00:00:00 2001 From: mkflow27 Date: Thu, 16 Jul 2026 12:43:23 +0000 Subject: [PATCH] [create-pull-request] automated change --- ...ppedAaveCore USDTErc4626VaultReview7330.md | 32 +++++++++++++++++++ erc4626/registry.json | 26 ++++++++++++++- ...ppedAaveCore USDTRateProviderReview423a.md | 31 ++++++++++++++++++ rate-providers/registry.json | 20 +++++++++++- 4 files changed, 107 insertions(+), 2 deletions(-) create mode 100644 erc4626/WrappedAaveCore USDTErc4626VaultReview7330.md create mode 100644 rate-providers/WrappedAaveCore USDTRateProviderReview423a.md diff --git a/erc4626/WrappedAaveCore USDTErc4626VaultReview7330.md b/erc4626/WrappedAaveCore USDTErc4626VaultReview7330.md new file mode 100644 index 0000000..779271e --- /dev/null +++ b/erc4626/WrappedAaveCore USDTErc4626VaultReview7330.md @@ -0,0 +1,32 @@ + +# Rate Provider: WrappedAave Core USDT rate provider + +## Details +This report was autogenerated on 16/07/2026. + +- Deployed at: + - [Avalanche:0x2E4BA06fF97E10D09FA4F5a270e97301eae729A9](https://snowtrace.io/address/0x2E4BA06fF97E10D09FA4F5a270e97301eae729A9) +- Audit report(s): + - [Audits](https://aave.com/security) + +## Context +waCoreUSDT is the ERC4626 Tokenization Spoke for Aave V4's Core Spoke. Depositing USDT supplies it into the Aave V4 Liquidity Hub through the Core Spoke; the non-rebasing wrapped token accrues lending yield,so its USDT exchange rate increases over time. It is fully ERC4626 compliant. Available at https://pro.aave.com/. + +## Review Checklist: Bare Minimum Compatibility +Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use. + +- [x] Tests based on the [balancer-v3-monorepo](https://github.com/balancer/balancer-v3-monorepo/tree/main/pkg/vault/test/foundry/fork) pass for the given ERC4626 vaults, which can be found [here](https://github.com/balancer/balancer-v3-erc4626-tests/tree/main/test). +- [x] The required Vault implements the required operational ERC4626 Interface + +### Administrative Privileges +- [x] The ERC4626 Vault is upgradeable** (e.g., via a proxy architecture). +- [x] Other contracts which are part of the `mint` callchain are upgradeable**. You can find more information + about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/26d2fd4d-da39-42e0-af4f-b1e9e7c0e2c8) + +## Conclusion +**Summary judgment: USABLE** +Passing fork tests can be found at https://github.com/balancer/balancer-v3-erc4626-tests/pull/145. + +** upgradeable in this context means that: +- The contract is a proxy contract with an implementation sourced from Etherscan. + diff --git a/erc4626/registry.json b/erc4626/registry.json index 14162c0..b86f87f 100644 --- a/erc4626/registry.json +++ b/erc4626/registry.json @@ -2014,6 +2014,30 @@ "canUseBufferForSwaps": true, "useUnderlyingForAddRemove": true, "useWrappedForAddRemove": true + }, + "0x2E4BA06fF97E10D09FA4F5a270e97301eae729A9": { + "asset": "0x9702230A8Ea53601f5cD2dc00fDBc13d4dF4A8c7", + "name": "WrappedAaveCore USDTErc4626Vault.md", + "summary": "safe", + "review": "./WrappedAaveCore USDTErc4626VaultReview7330.md", + "warnings": [], + "upgradeableComponents": [ + { + "entrypoint": "0xd07369fae4a5bb13c9ce446b052c7867b1abdf6e", + "implementationReviewed": "0xfacde4e3f0368e15f767d9e2db0b67817af52c1c" + }, + { + "entrypoint": "0x2e4ba06ff97e10d09fa4f5a270e97301eae729a9", + "implementationReviewed": "0xe5e48faca240ff94e7c923b0b08c138e6a2ed950" + }, + { + "entrypoint": "0x2E4BA06fF97E10D09FA4F5a270e97301eae729A9", + "implementationReviewed": "0xe5e48faca240ff94e7c923b0b08c138e6a2ed950" + } + ], + "canUseBufferForSwaps": true, + "useUnderlyingForAddRemove": true, + "useWrappedForAddRemove": true } }, "sepolia": { @@ -3157,4 +3181,4 @@ "useWrappedForAddRemove": true } } -} +} \ No newline at end of file diff --git a/rate-providers/WrappedAaveCore USDTRateProviderReview423a.md b/rate-providers/WrappedAaveCore USDTRateProviderReview423a.md new file mode 100644 index 0000000..dc83a44 --- /dev/null +++ b/rate-providers/WrappedAaveCore USDTRateProviderReview423a.md @@ -0,0 +1,31 @@ + +# Rate Provider: WrappedAave Core USDT rate provider + +## Details +This report was autogenerated on 16/07/2026. + +- Deployed at: + - [Avalanche:0xCC6448b8ADC00614c1CDD915bf7A00F3EFfA0E45](https://snowtrace.io/address/0xCC6448b8ADC00614c1CDD915bf7A00F3EFfA0E45) +- Audit report(s): + - [Audits](https://aave.com/security) + +## Context +The rate provider reports the rate of waCoreUSDT in terms of its underlying USDT,sourced from the token's ERC4626 convertToAssets() exchange rate. + +## Review Checklist: Bare Minimum Compatibility +Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use. + +- [x] Implements the [`IRateProvider`](https://github.com/balancer/balancer-v2-monorepo/blob/bc3b3fee6e13e01d2efe610ed8118fdb74dfc1f2/pkg/interfaces/contracts/pool-utils/IRateProvider.sol) interface. +- [x] `getRate` returns an 18-decimal fixed point number (i.e., 1 == 1e18) regardless of underlying token decimals. + +### Administrative Privileges +- [ ] The Rate Provider is upgradeable** (e.g., via a proxy architecture). +- [x] Other contracts which are part of the `getRate` callchain are upgradeable**. You can find more information + about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/78edbfca-af21-41e8-a294-d2f61acd0603) + +## Conclusion +**Summary judgment: USABLE** + +** upgradeable in this context means that: +- The contract is a proxy contract with an implementation sourced from Etherscan and the proxy emitted an "Upgraded" event. + diff --git a/rate-providers/registry.json b/rate-providers/registry.json index 0cc13ad..6ef1aab 100644 --- a/rate-providers/registry.json +++ b/rate-providers/registry.json @@ -1044,6 +1044,24 @@ "warnings": [], "factory": "", "upgradeableComponents": [] + }, + "0xCC6448b8ADC00614c1CDD915bf7A00F3EFfA0E45": { + "asset": "0x2E4BA06fF97E10D09FA4F5a270e97301eae729A9", + "name": "WrappedAaveCore USDTRateProvider.md", + "summary": "safe", + "review": "./WrappedAaveCore USDTRateProviderReview423a.md", + "warnings": [], + "factory": "", + "upgradeableComponents": [ + { + "entrypoint": "0x2e4ba06ff97e10d09fa4f5a270e97301eae729a9", + "implementationReviewed": "0xe5e48faca240ff94e7c923b0b08c138e6a2ed950" + }, + { + "entrypoint": "0xd07369fae4a5bb13c9ce446b052c7867b1abdf6e", + "implementationReviewed": "0xfacde4e3f0368e15f767d9e2db0b67817af52c1c" + } + ] } }, "base": { @@ -5193,4 +5211,4 @@ ] } } -} +} \ No newline at end of file