Repository navigation

feat: savings donation-attack guard + parallelizer pause refactor - #27

Merged

FabienCoutant merged 33 commits into

devfrom

feat/savings-donation-and-pause-refactor

Jul 13, 2026

Commits on May 27, 2026

chore(foundry): default to via_ir = false
FabienCoutant
committed
5b012cf
refacto(utils): add SECONDS_PER_YEAR constant and Pause errors
FabienCoutant
committed
30f7d5c
refacto(parallelizer): split togglePause into pause and unpause
FabienCoutant
committed
f363ab2
chore(foundry): default to via_ir = false
FabienCoutant
committed
f437867
refacto(utils): add SECONDS_PER_YEAR constant and Pause errors
FabienCoutant
committed
b3a581e
fix(savings): track storedAssets to prevent donation attacks
FabienCoutant
committed
d85eb84
test(savings): cover donation attacks, recoverSurplus and upgrade path
FabienCoutant
committed
64923d1
Merge pull request #25 from parallel-protocol/refactor/parallelizer-pause
FabienCoutant
authored
a1204e1
Merge pull request #26 from parallel-protocol/fix/savings-donation-attack
FabienCoutant
authored
4baa958
style(savings): wrap long abi.encodeWithSelector line to satisfy solhint max-line-length
FabienCoutant
committed
ad83408
Merge lint fix from fix/savings-donation-attack
FabienCoutant
committed
6d5d279
test(invariants): stabilize path-independence vs intended I-6 path dependence
FabienCoutant
committed
1953ce3
Merge path-independence invariant stabilization from test/path-independence-tolerance
FabienCoutant
committed
8f47e85
fix(invariants): drop redeem bound (stack), keep widened path-independence tolerances
FabienCoutant
committed
2310b90
chore: remove accidentally committed local script AddCollateralMUSDC
FabienCoutant
committed
8a9c2ac
Merge dev (path-independence tolerance fix #28) into integration branch
FabienCoutant
committed
7c24bc4

Commits on Jun 5, 2026

docs(audits): add Cyfrin Parallel Savings Fix 1st report
FabienCoutant
committed
33b7a00
fix(Savings) [Cyfrin-I4]: set lastUpdate in initialize to bound first accrual window
FabienCoutant
committed
7468f4e
fix(Savings) [Cyfrin-I3]: restrict initializeStoredAssets to governance
FabienCoutant
committed
fcbc460
fix(Savings) [Cyfrin-L1]: bound storedAssets seeding to a lastUpdate freshness window
FabienCoutant
committed
ed6ae54
fix(Savings) [Cyfrin-L2]: drop paused interval on unpause so pausing halts yield
FabienCoutant
committed
0e81ba4

Commits on Jun 10, 2026

docs(audits): add Cyfrin Parallel Savings Fix final report
FabienCoutant
committed
ec66a0d
Merge pull request #29 from parallel-protocol/audit/cyfrin-june-2026-savings-donation
FabienCoutant
authored
61942aa

Commits on Jun 26, 2026

docs(audits): add Bailsec Parallel Savings Fix 1st report
FabienCoutant
committed
011211f
fix(Savings) [Bailsec-01]: grant initializeStoredAssets selector to governor for atomic upgrade
FabienCoutant
committed
c078aea
fix(Savings) [Bailsec-02]: re-anchor lastUpdate in initializeStoredAssets
FabienCoutant
committed
90428c0
fix(Savings) [Bailsec-03]: return storedAssets from totalAssets while paused
FabienCoutant
committed
a3c5530
fix(Savings) [Bailsec-04]: skip accrual while paused so rate setters cannot mint paused yield
FabienCoutant
committed
c4aebc2
fix(Savings) [Bailsec-05]: enforce ERC4626 max checks in deposit/mint/withdraw/redeem
FabienCoutant
committed
d87db00
fix(Savings) [Bailsec-07]: guard entry points against uninitialized storedAssets after non-atomic upgrade
FabienCoutant
committed
1276221

Commits on Jul 6, 2026

fix(Savings) [Bailsec-05]: extend ERC4626 max checks to EIP-3009 authorized deposit/redeem
FabienCoutant
committed
f0dde86

Commits on Jul 13, 2026

docs(audits): add Bailsec Parallel Savings Fix final report
FabienCoutant
committed
21a1b7a
Merge pull request #31 from parallel-protocol/audit/bailsec-june-2026-savings-donation
FabienCoutant
authored
aeb3262