From dcaa82123af59759277fc8f03e8226e7b74e47be Mon Sep 17 00:00:00 2001 From: mkflow27 Date: Fri, 4 Sep 2026 12:33:35 +0000 Subject: [PATCH 1/3] [create-pull-request] automated change --- ...pedNeverlandXAUt0Erc4626VaultReview167e.md | 32 +++++++++++++++++++ erc4626/registry.json | 20 ++++++++++++ ...pedNeverlandXAUt0RateProviderReview5d0b.md | 31 ++++++++++++++++++ rate-providers/registry.json | 20 ++++++++++++ 4 files changed, 103 insertions(+) create mode 100644 erc4626/WrappedNeverlandXAUt0Erc4626VaultReview167e.md create mode 100644 rate-providers/WrappedNeverlandXAUt0RateProviderReview5d0b.md diff --git a/erc4626/WrappedNeverlandXAUt0Erc4626VaultReview167e.md b/erc4626/WrappedNeverlandXAUt0Erc4626VaultReview167e.md new file mode 100644 index 0000000..78547c4 --- /dev/null +++ b/erc4626/WrappedNeverlandXAUt0Erc4626VaultReview167e.md @@ -0,0 +1,32 @@ + +# Rate Provider: WrappedNeverland XAUt0 rate provider + +## Details +This report was autogenerated on 04/09/2026. + +- Deployed at: + - [Monad:0x22139a346b6312eb0a9812c67cfce4a694676d59](https://monadvision.com/address/0x22139a346b6312eb0a9812c67cfce4a694676d59) +- Audit report(s): + - [Audits](https://github.com/Neverland-Money/security-audits) + +## Context +The ERC4626 Rate Provider tracks the embedded yield within the vault. + +## Review Checklist: Bare Minimum Compatibility +Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use. + +- [x] Tests based on the [balancer-v3-monorepo](https://github.com/balancer/balancer-v3-monorepo/tree/main/pkg/vault/test/foundry/fork) pass for the given ERC4626 vaults, which can be found [here](https://github.com/balancer/balancer-v3-erc4626-tests/tree/main/test). +- [x] The required Vault implements the required operational ERC4626 Interface + +### Administrative Privileges +- [x] The ERC4626 Vault is upgradeable** (e.g., via a proxy architecture). +- [x] Other contracts which are part of the `mint` callchain are upgradeable**. You can find more information + about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/0672c4ac-ba6c-4241-b901-8a7218bd8fdd) + +## Conclusion +**Summary judgment: USABLE** +Passing fork tests can be found at https://github.com/balancer/balancer-v3-erc4626-tests/pull/151. + +** upgradeable in this context means that: +- The contract is a proxy contract with an implementation sourced from Etherscan. + diff --git a/erc4626/registry.json b/erc4626/registry.json index 16b2a6b..39bd529 100644 --- a/erc4626/registry.json +++ b/erc4626/registry.json @@ -3427,6 +3427,26 @@ "canUseBufferForSwaps": true, "useUnderlyingForAddRemove": true, "useWrappedForAddRemove": true + }, + "0x22139a346b6312eb0a9812c67cfce4a694676d59": { + "asset": "0x01bFF41798a0BcF287b996046Ca68b395DbC1071", + "name": "WrappedNeverlandXAUt0Erc4626Vault.md", + "summary": "safe", + "review": "./WrappedNeverlandXAUt0Erc4626VaultReview167e.md", + "warnings": [], + "upgradeableComponents": [ + { + "entrypoint": "0x22139a346b6312eb0a9812c67cfce4a694676d59", + "implementationReviewed": "0xd75d6bf28519acd719ae59cbc47d9af0a0792af1" + }, + { + "entrypoint": "0x80f00661b13cc5f6ccd3885be7b4c9c67545d585", + "implementationReviewed": "0x507c53de7b334dae1ecfe2e6d8cf75716431c3fc" + } + ], + "canUseBufferForSwaps": true, + "useUnderlyingForAddRemove": true, + "useWrappedForAddRemove": true } } } \ No newline at end of file diff --git a/rate-providers/WrappedNeverlandXAUt0RateProviderReview5d0b.md b/rate-providers/WrappedNeverlandXAUt0RateProviderReview5d0b.md new file mode 100644 index 0000000..1677bf4 --- /dev/null +++ b/rate-providers/WrappedNeverlandXAUt0RateProviderReview5d0b.md @@ -0,0 +1,31 @@ + +# Rate Provider: WrappedNeverland XAUt0 rate provider + +## Details +This report was autogenerated on 04/09/2026. + +- Deployed at: + - [Monad:0x0c11574bbeBf7cC803C35a48785AeE4826E43318](https://monadvision.com/address/0x0c11574bbeBf7cC803C35a48785AeE4826E43318) +- Audit report(s): + - [Audits](https://github.com/Neverland-Money/security-audits) + +## Context +Neverland is built on the Aave V3 architecture: a battle-tested,highly secure lending protocol. + +## Review Checklist: Bare Minimum Compatibility +Each of the items below represents an absolute requirement for the Rate Provider. If any of these is unchecked, the Rate Provider is unfit to use. + +- [x] Implements the [`IRateProvider`](https://github.com/balancer/balancer-v2-monorepo/blob/bc3b3fee6e13e01d2efe610ed8118fdb74dfc1f2/pkg/interfaces/contracts/pool-utils/IRateProvider.sol) interface. +- [ ] `getRate` returns an 18-decimal fixed point number (i.e., 1 == 1e18) regardless of underlying token decimals. + +### Administrative Privileges +- [ ] The Rate Provider is upgradeable** (e.g., via a proxy architecture). +- [x] Other contracts which are part of the `getRate` callchain are upgradeable**. You can find more information + about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/56203b85-5762-4322-8ba8-1b2f582e0712) + +## Conclusion +**Summary judgment: UNUSABLE** + +** upgradeable in this context means that: +- The contract is a proxy contract with an implementation sourced from Etherscan and the proxy emitted an "Upgraded" event. + diff --git a/rate-providers/registry.json b/rate-providers/registry.json index 5ae5892..fb12ff6 100644 --- a/rate-providers/registry.json +++ b/rate-providers/registry.json @@ -5454,6 +5454,26 @@ "implementationReviewed": "0xd75d6bf28519acd719ae59cbc47d9af0a0792af1" } ] + }, + "0x0c11574bbeBf7cC803C35a48785AeE4826E43318": { + "asset": "0x22139a346b6312eb0a9812c67cfce4a694676d59", + "name": "WrappedNeverlandXAUt0RateProvider.md", + "summary": "unsafe", + "review": "./WrappedNeverlandXAUt0RateProviderReview5d0b.md", + "warnings": [ + "market-rate" + ], + "factory": "", + "upgradeableComponents": [ + { + "entrypoint": "0x22139a346b6312eb0a9812c67cfce4a694676d59", + "implementationReviewed": "0xd75d6bf28519acd719ae59cbc47d9af0a0792af1" + }, + { + "entrypoint": "0x80f00661b13cc5f6ccd3885be7b4c9c67545d585", + "implementationReviewed": "0x507c53de7b334dae1ecfe2e6d8cf75716431c3fc" + } + ] } } } \ No newline at end of file From baf6d4dac3af249904b79c57d461452a9e6cf887 Mon Sep 17 00:00:00 2001 From: ZeKraken <79888567+zekraken-bot@users.noreply.github.com> Date: Fri, 4 Sep 2026 08:35:33 -0400 Subject: [PATCH 2/3] Update summary judgment from UNUSABLE to USABLE --- rate-providers/WrappedNeverlandXAUt0RateProviderReview5d0b.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rate-providers/WrappedNeverlandXAUt0RateProviderReview5d0b.md b/rate-providers/WrappedNeverlandXAUt0RateProviderReview5d0b.md index 1677bf4..98033c0 100644 --- a/rate-providers/WrappedNeverlandXAUt0RateProviderReview5d0b.md +++ b/rate-providers/WrappedNeverlandXAUt0RateProviderReview5d0b.md @@ -24,7 +24,7 @@ Each of the items below represents an absolute requirement for the Rate Provider about the involved contracts in this [tenderly simulation](https://www.tdly.co/shared/simulation/56203b85-5762-4322-8ba8-1b2f582e0712) ## Conclusion -**Summary judgment: UNUSABLE** +**Summary judgment: USABLE** ** upgradeable in this context means that: - The contract is a proxy contract with an implementation sourced from Etherscan and the proxy emitted an "Upgraded" event. From fb624b334531b1f004d0085659efd1ab773f856c Mon Sep 17 00:00:00 2001 From: ZeKraken <79888567+zekraken-bot@users.noreply.github.com> Date: Fri, 4 Sep 2026 08:36:35 -0400 Subject: [PATCH 3/3] Change summary from 'unsafe' to 'safe' --- rate-providers/registry.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rate-providers/registry.json b/rate-providers/registry.json index fb12ff6..30be465 100644 --- a/rate-providers/registry.json +++ b/rate-providers/registry.json @@ -5458,7 +5458,7 @@ "0x0c11574bbeBf7cC803C35a48785AeE4826E43318": { "asset": "0x22139a346b6312eb0a9812c67cfce4a694676d59", "name": "WrappedNeverlandXAUt0RateProvider.md", - "summary": "unsafe", + "summary": "safe", "review": "./WrappedNeverlandXAUt0RateProviderReview5d0b.md", "warnings": [ "market-rate" @@ -5476,4 +5476,4 @@ ] } } -} \ No newline at end of file +}