From 866232618216659e9f3d7d381137a2c34bb2c45d Mon Sep 17 00:00:00 2001 From: mkflow27 Date: Fri, 3 Jul 2026 18:58:54 +0000 Subject: [PATCH 1/2] [create-pull-request] automated change --- ...pedAaveMonad WETHErc4626VaultReview0b31.md | 32 +++++++++++++++++++ erc4626/registry.json | 20 ++++++++++++ ...pedAaveMonad WETHRateProviderReview76be.md | 31 ++++++++++++++++++ rate-providers/registry.json | 18 +++++++++++ 4 files changed, 101 insertions(+) create mode 100644 erc4626/WrappedAaveMonad WETHErc4626VaultReview0b31.md create mode 100644 rate-providers/WrappedAaveMonad WETHRateProviderReview76be.md diff --git a/erc4626/WrappedAaveMonad WETHErc4626VaultReview0b31.md b/erc4626/WrappedAaveMonad WETHErc4626VaultReview0b31.md new file mode 100644 index 0000000..38f51bc --- /dev/null +++ b/erc4626/WrappedAaveMonad WETHErc4626VaultReview0b31.md @@ -0,0 +1,32 @@ + +# Rate Provider: WrappedAave Monad WETH rate provider + +## Details +This report was autogenerated on 03/07/2026. + +- Deployed at: + - [Monad:0x967d427eF0Eb4AEB7a1B523A98B04061F094276B](https://monadvision.com/address/0x967d427eF0Eb4AEB7a1B523A98B04061F094276B) +- Audit report(s): + - [Audits](https://aave.com/security) + +## Context +The waMonWETH ERC4626 vault is a Static aToken wrapper developed by Aave that wraps Aave V3's interest-bearing aWETH (WETH supplied to the Aave Monad market) into a non-rebasing ERC4626 token whose value continuously appreciates as lending yield accrues. + +## Review Checklist: Bare Minimum Compatibility +Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use. + +- [x] Tests based on the [balancer-v3-monorepo](https://github.com/balancer/balancer-v3-monorepo/tree/main/pkg/vault/test/foundry/fork) pass for the given ERC4626 vaults, which can be found [here](https://github.com/balancer/balancer-v3-erc4626-tests/tree/main/test). +- [x] The required Vault implements the required operational ERC4626 Interface + +### Administrative Privileges +- [ ] The ERC4626 Vault is upgradeable** (e.g., via a proxy architecture). +- [x] Other contracts which are part of the `mint` callchain are upgradeable**. You can find more information + about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/5b559aff-4fd6-48c3-8524-acbd90dc1dee) + +## Conclusion +**Summary judgment: USABLE** +Passing fork tests can be found at https://github.com/balancer/balancer-v3-erc4626-tests/pull/143. + +** upgradeable in this context means that: +- The contract is a proxy contract with an implementation sourced from Etherscan. + diff --git a/erc4626/registry.json b/erc4626/registry.json index 799b92f..e85f4cf 100644 --- a/erc4626/registry.json +++ b/erc4626/registry.json @@ -3055,6 +3055,26 @@ "canUseBufferForSwaps": true, "useUnderlyingForAddRemove": true, "useWrappedForAddRemove": true + }, + "0x967d427eF0Eb4AEB7a1B523A98B04061F094276B": { + "asset": "0xEE8c0E9f1BFFb4Eb878d8f15f368A02a35481242", + "name": "WrappedAaveMonad WETHErc4626Vault.md", + "summary": "safe", + "review": "./WrappedAaveMonad WETHErc4626VaultReview0b31.md", + "warnings": [], + "upgradeableComponents": [ + { + "entrypoint": "0x69a5f9ad4f96ebf0a0c792dd42a01cc5c0102fef", + "implementationReviewed": "0x9539531ea4f6563a66421a7449506152609985be" + }, + { + "entrypoint": "0x967d427ef0eb4aeb7a1b523a98b04061f094276b", + "implementationReviewed": "0xbd940fc427878eaa998f0713a16fed1cb5e892b1" + } + ], + "canUseBufferForSwaps": true, + "useUnderlyingForAddRemove": true, + "useWrappedForAddRemove": true } } } \ No newline at end of file diff --git a/rate-providers/WrappedAaveMonad WETHRateProviderReview76be.md b/rate-providers/WrappedAaveMonad WETHRateProviderReview76be.md new file mode 100644 index 0000000..8c56434 --- /dev/null +++ b/rate-providers/WrappedAaveMonad WETHRateProviderReview76be.md @@ -0,0 +1,31 @@ + +# Rate Provider: WrappedAave Monad WETH rate provider + +## Details +This report was autogenerated on 03/07/2026. + +- Deployed at: + - [Monad:0xAbD0BdCe36f2b8b4051409e780BDb7c4ad5Dc5Bf](https://monadvision.com/address/0xAbD0BdCe36f2b8b4051409e780BDb7c4ad5Dc5Bf) +- Audit report(s): + - [Audits](https://aave.com/security) + +## Context +The rate provider is used to provide the rate of waMonWETH in terms of underlying WETH using its ERC4626 contract. + +## Review Checklist: Bare Minimum Compatibility +Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use. + +- [x] Implements the [`IRateProvider`](https://github.com/balancer/balancer-v2-monorepo/blob/bc3b3fee6e13e01d2efe610ed8118fdb74dfc1f2/pkg/interfaces/contracts/pool-utils/IRateProvider.sol) interface. +- [x] `getRate` returns an 18-decimal fixed point number (i.e., 1 == 1e18) regardless of underlying token decimals. + +### Administrative Privileges +- [ ] The Rate Provider is upgradeable** (e.g., via a proxy architecture). +- [x] Other contracts which are part of the `getRate` callchain are upgradeable**. You can find more information + about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/b62487fe-5080-4f50-b07c-e8ece39ae018) + +## Conclusion +**Summary judgment: USABLE** + +** upgradeable in this context means that: +- The contract is a proxy contract with an implementation sourced from Etherscan and the proxy emitted an "Upgraded" event. + diff --git a/rate-providers/registry.json b/rate-providers/registry.json index 079a6a0..f220270 100644 --- a/rate-providers/registry.json +++ b/rate-providers/registry.json @@ -5101,6 +5101,24 @@ "implementationReviewed": "0xef17750d3a162e28a302e266c474ff8989d60ecd" } ] + }, + "0xAbD0BdCe36f2b8b4051409e780BDb7c4ad5Dc5Bf": { + "asset": "0x967d427eF0Eb4AEB7a1B523A98B04061F094276B", + "name": "WrappedAaveMonad WETHRateProvider.md", + "summary": "safe", + "review": "./WrappedAaveMonad WETHRateProviderReview76be.md", + "warnings": [], + "factory": "", + "upgradeableComponents": [ + { + "entrypoint": "0x69a5f9ad4f96ebf0a0c792dd42a01cc5c0102fef", + "implementationReviewed": "0x9539531ea4f6563a66421a7449506152609985be" + }, + { + "entrypoint": "0x967d427ef0eb4aeb7a1b523a98b04061f094276b", + "implementationReviewed": "0xbd940fc427878eaa998f0713a16fed1cb5e892b1" + } + ] } } } \ No newline at end of file From cba1117d3e57f03f3d690c6c3ba67286fa82d51a Mon Sep 17 00:00:00 2001 From: ZeKraken <79888567+zekraken-bot@users.noreply.github.com> Date: Mon, 6 Jul 2026 11:59:14 -0400 Subject: [PATCH 2/2] Update registry.json --- rate-providers/registry.json | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/rate-providers/registry.json b/rate-providers/registry.json index f5e6bf4..2bc92ed 100644 --- a/rate-providers/registry.json +++ b/rate-providers/registry.json @@ -5120,7 +5120,6 @@ } ] }, - }, "0x34d260A42F3D6b76053bC2d733B109e5708494B3": { "asset": "0x5E7109A755fD2b86361F95065cDE07FbAb50CA1D", "name": "WrappedAaveMonad USDT0RateProvider.md", @@ -5140,4 +5139,4 @@ ] } } -} \ No newline at end of file +}