Repository navigation

fix: Bailsec Core audit remediation (breaking: redemption ABI) - #33

Merged

FabienCoutant merged 28 commits into

devfrom

fix/bailsec-core-audit

Oct 5, 2026

Merged

fix: Bailsec Core audit remediation (breaking: redemption ABI)#33
FabienCoutant merged 28 commits into
devfrom
fix/bailsec-core-audit

Commits on Sep 7, 2026
- docs(audits): add Bailsec Core report for v3.2.1
  FabienCoutant
  committed
  dda3576
- fix(harvester): restrict harvest to trusted callers
  FabienCoutant
  committed
  9c4d48b
- fix(oracle): bound and log the MAX target ratchet
  FabienCoutant
  committed
  a5fccc2
- fix(harvester): make setMaxSlippage write the live limit
  FabienCoutant
  committed
  dda9144
- fix(harvester): reject partial router fills and credit positive settlement
  FabienCoutant
  committed
  e744bdf
- refactor(rebalancer): rename Harvester to Rebalancer
  FabienCoutant
  committed
  fc99cdb
- refactor(rebalancer): rename IHarvester and drop stale deployment records
  FabienCoutant
  committed
  a472233
- docs(rebalancer): restore upstream names in the Angle attribution
  FabienCoutant
  committed
  dab8270
- fix(rebalancer): return unconsumed router input instead of reverting
  FabienCoutant
  committed
  87a7881
- test(rebalancer): cover the harvest flash loan settlement path
  FabienCoutant
  committed
  7497d1c
- fix(rebalancer): revoke allowances a configuration rotation leaves behind
  FabienCoutant
  committed
  f57482c
- fix(rebalancer): settle the flash loan fee instead of rejecting it
  FabienCoutant
  committed
  9a12fc6
- test(rebalancer): express the mock flash loan fee in basis points
  FabienCoutant
  committed
  07c159f
- fix(redeemer): bind the redemption output list to the caller's intent
  FabienCoutant
  committed
  cbe2e3e
- test(invariants): make the path independence suite measure path independence
  FabienCoutant
  committed
  7cceca7
- perf(rebalancer): pack the yield bearing params into two slots
  FabienCoutant
  committed
  5710e3c
- fix(reward-handler): make the swap router configurable per chain
  FabienCoutant
  committed
  b035be8
Commits on Sep 8, 2026
- test(redeemer): measure the donation attack and what actually starves it
  FabienCoutant
  committed
  bf25086
- fix(redeemer): ramp the redemption curve out of donation range
  FabienCoutant
  committed
  6e12402
- fix(oracle): move the deviation tolerance onto the burn side
  FabienCoutant
  committed
  ec5f1df
- fix(surplus): reject the Parallelizer itself as a payee
  FabienCoutant
  committed
  7648a26
- style(tests): wrap the over-length line the ratchet test introduced
  FabienCoutant
  committed
  95c5ccb
Commits on Sep 28, 2026
- fix(oracle): seed the MAX target at deployment instead of leaving it at zero
  FabienCoutant
  committed
  eae104c
- fix(rebalancer): clear the deposit address approval when the asset rotates
  FabienCoutant
  committed
  9a35f75
- test(redemption): pin the donation attack against the surplus buffer steady state
  FabienCoutant
  committed
  ce9c016
- test(redemption): measure the donation attack across the monthly surplus cycle
  FabienCoutant
  committed
  3e7d93a
- style(tests): wrap the rebalancer constructor calls over the line limit
  FabienCoutant
  committed
  038164e
- style(docs): realign the README tables after the rebalancer rename
  FabienCoutant
  committed
  518cb91

Commits

Commits on Sep 7, 2026

Commits on Sep 8, 2026

Commits on Sep 28, 2026