Repository navigation

fix: Bailsec Core audit remediation (breaking: redemption ABI) - #33

Merged

FabienCoutant merged 28 commits into

devfrom

fix/bailsec-core-audit

Oct 5, 2026

Commits on Sep 7, 2026

docs(audits): add Bailsec Core report for v3.2.1
FabienCoutant
committed
dda3576
fix(harvester): restrict harvest to trusted callers
FabienCoutant
committed
9c4d48b
fix(oracle): bound and log the MAX target ratchet
FabienCoutant
committed
a5fccc2
fix(harvester): make setMaxSlippage write the live limit
FabienCoutant
committed
dda9144
fix(harvester): reject partial router fills and credit positive settlement
FabienCoutant
committed
e744bdf
refactor(rebalancer): rename Harvester to Rebalancer
FabienCoutant
committed
fc99cdb
refactor(rebalancer): rename IHarvester and drop stale deployment records
FabienCoutant
committed
a472233
docs(rebalancer): restore upstream names in the Angle attribution
FabienCoutant
committed
dab8270
fix(rebalancer): return unconsumed router input instead of reverting
FabienCoutant
committed
87a7881
test(rebalancer): cover the harvest flash loan settlement path
FabienCoutant
committed
7497d1c
fix(rebalancer): revoke allowances a configuration rotation leaves behind
FabienCoutant
committed
f57482c
fix(rebalancer): settle the flash loan fee instead of rejecting it
FabienCoutant
committed
9a12fc6
test(rebalancer): express the mock flash loan fee in basis points
FabienCoutant
committed
07c159f
fix(redeemer): bind the redemption output list to the caller's intent
FabienCoutant
committed
cbe2e3e
test(invariants): make the path independence suite measure path independence
FabienCoutant
committed
7cceca7
perf(rebalancer): pack the yield bearing params into two slots
FabienCoutant
committed
5710e3c
fix(reward-handler): make the swap router configurable per chain
FabienCoutant
committed
b035be8

Commits on Sep 8, 2026

test(redeemer): measure the donation attack and what actually starves it
FabienCoutant
committed
bf25086
fix(redeemer): ramp the redemption curve out of donation range
FabienCoutant
committed
6e12402
fix(oracle): move the deviation tolerance onto the burn side
FabienCoutant
committed
ec5f1df
fix(surplus): reject the Parallelizer itself as a payee
FabienCoutant
committed
7648a26
style(tests): wrap the over-length line the ratchet test introduced
FabienCoutant
committed
95c5ccb

Commits on Sep 28, 2026

fix(oracle): seed the MAX target at deployment instead of leaving it at zero
FabienCoutant
committed
eae104c
fix(rebalancer): clear the deposit address approval when the asset rotates
FabienCoutant
committed
9a35f75
test(redemption): pin the donation attack against the surplus buffer steady state
FabienCoutant
committed
ce9c016
test(redemption): measure the donation attack across the monthly surplus cycle
FabienCoutant
committed
3e7d93a
style(tests): wrap the rebalancer constructor calls over the line limit
FabienCoutant
committed
038164e
style(docs): realign the README tables after the rebalancer rename
FabienCoutant
committed
518cb91