Merge pull request #240 from balancer/mkflow27/issue221

Mkflow27/issue221
balancer · Jan 29, 2025 · 7e7c870 · 7e7c870
2 parents ce8c2f6 + 71eef0d
commit 7e7c870
Show file tree

Hide file tree

Showing 5 changed files with 438 additions and 2 deletions.
diff --git a/erc4626/StatATokenV2Review.md b/erc4626/StatATokenV2Review.md
@@ -21,6 +21,19 @@
     - [base:0x5e8B674127B321DC344c078e58BBACc3f3008962](https://basescan.org/address/0x5e8B674127B321DC344c078e58BBACc3f3008962#readProxyContract)
     - [base:0x74D4D1D440c9679b1013999Bd91507eAa2fff651](https://basescan.org/address/0x74D4D1D440c9679b1013999Bd91507eAa2fff651#readProxyContract)
     - [base:0xF8F10f39116716e89498c1c5E94137ADa11b2BC7](https://basescan.org/address/0xF8F10f39116716e89498c1c5E94137ADa11b2BC7#readProxyContract)
+    - [arbitrum:0x4cE13a79f45C1Be00BdABD38B764aC28C082704E](https://arbiscan.io/address/0x4cE13a79f45C1Be00BdABD38B764aC28C082704E#readProxyContract)
+    - [arbitrum:0xD9E3Ef2c12de90E3b03F7b7E3964956a71920d40](https://arbiscan.io/address/0xD9E3Ef2c12de90E3b03F7b7E3964956a71920d40#readProxyContract)
+    - [arbitrum:0x52Dc1FEeFA4f9a99221F93D79da46Ae89b8c0967](https://arbiscan.io/address/0x52Dc1FEeFA4f9a99221F93D79da46Ae89b8c0967)
+    - [arbitrum:0x7F6501d3B98eE91f9b9535E4b0ac710Fb0f9e0bc](https://arbiscan.io/address/0x7F6501d3B98eE91f9b9535E4b0ac710Fb0f9e0bc)
+    - [arbitrum:0xe98fc055c99DECD8Da0c111B090885d5d15C774E](https://arbiscan.io/address/0xe98fc055c99DECD8Da0c111B090885d5d15C774E)
+    - [arbitrum:0xa6D12574eFB239FC1D2099732bd8b5dC6306897F](https://arbiscan.io/address/0xa6D12574eFB239FC1D2099732bd8b5dC6306897F)
+    - [arbitrum:0xEAB84053B99f2ec4433F5121A1CB1524c8c998F8](https://arbiscan.io/address/0xEAB84053B99f2ec4433F5121A1CB1524c8c998F8#code)
+    - [arbitrum:0xf09EDbF2655B2A56753bD60D22CeAB2AC5D04188](https://arbiscan.io/address/0xf09EDbF2655B2A56753bD60D22CeAB2AC5D04188#readProxyContract)
+    - [arbitrum:0xbB8A61425DFE172AA3a6f882aAFaBA00B32b7d59](https://arbiscan.io/address/0xbB8A61425DFE172AA3a6f882aAFaBA00B32b7d59)
+    - [arbitrum:0xf253BD61aEd0E9D62523eA76CD6F38B4a51dA145](https://arbiscan.io/address/0xf253BD61aEd0E9D62523eA76CD6F38B4a51dA145)
+    - [arbitrum:0xE6D5923281c89DC989D00817387292387552d5C1](https://arbiscan.io/address/0xE6D5923281c89DC989D00817387292387552d5C1#readProxyContract)
+    - [arbitrum:0xD089B4cb88Dacf4e27be869A00e9f7e2E3C18193](https://arbiscan.io/address/0xD089B4cb88Dacf4e27be869A00e9f7e2E3C18193#readProxyContract)
+
 
 - Audit report(s):
     - [StatATokenV2 audits](https://github.com/aave-dao/aave-v3-origin/blob/067d29eb75115179501edc4316d125d9773f7928/audits/11-09-2024_Certora_StataTokenV2.pdf)
@@ -156,6 +169,78 @@ If none of these is checked, then this might be a pretty great Rate Provider! If
         - admin type: Aave governance system.
             - multisig timelock? YES: 24 hours.
 
+    #### Wrapped Aave Arbitrum WETH - 0x4cE13a79f45C1Be00BdABD38B764aC28C082704E
+    - upgradeable component: `StataTokenV2` ([arbitrum:0x4cE13a79f45C1Be00BdABD38B764aC28C082704E](https://arbiscan.io/address/0x4cE13a79f45C1Be00BdABD38B764aC28C082704E#readProxyContract))
+        - admin address: [arbitrum:0xFF1137243698CaA18EE364Cc966CF0e02A4e6327](https://arbiscan.io/address/0xFF1137243698CaA18EE364Cc966CF0e02A4e6327)
+        - admin type: Aave governance system.
+            - multisig timelock? YES: 24 hours.
+
+    #### Wrapped Aave Arbitrum weETH - 0xD9E3Ef2c12de90E3b03F7b7E3964956a71920d40
+    - upgradeable component: `StataTokenV2` ([arbitrum:0xD9E3Ef2c12de90E3b03F7b7E3964956a71920d40](https://arbiscan.io/address/0xD9E3Ef2c12de90E3b03F7b7E3964956a71920d40#readProxyContract))
+        - admin address: [arbitrum:0xFF1137243698CaA18EE364Cc966CF0e02A4e6327](https://arbiscan.io/address/0xFF1137243698CaA18EE364Cc966CF0e02A4e6327)
+        - admin type: Aave governance system.
+            - multisig timelock? YES: 24 hours.
+
+    #### Wrapped Aave Arbitrum WBTC - 0x52Dc1FEeFA4f9a99221F93D79da46Ae89b8c0967
+    - upgradeable component: `StataTokenV2` ([arbitrum:0x52Dc1FEeFA4f9a99221F93D79da46Ae89b8c0967](https://arbiscan.io/address/0x52Dc1FEeFA4f9a99221F93D79da46Ae89b8c0967#code))
+        - admin address: [arbitrum:0xFF1137243698CaA18EE364Cc966CF0e02A4e6327](https://arbiscan.io/address/0xFF1137243698CaA18EE364Cc966CF0e02A4e6327)
+        - admin type: Aave governance system.
+            - multisig timelock? YES: 24 hours.
+
+    #### Wrapped Aave Arbitrum USDCn - 0x7F6501d3B98eE91f9b9535E4b0ac710Fb0f9e0bc
+    - upgradeable component: `StataTokenV2` ([arbitrum:0x7F6501d3B98eE91f9b9535E4b0ac710Fb0f9e0bc](https://arbiscan.io/address/0x7F6501d3B98eE91f9b9535E4b0ac710Fb0f9e0bc#readProxyContract))
+        - admin address: [arbitrum:0xFF1137243698CaA18EE364Cc966CF0e02A4e6327](https://arbiscan.io/address/0xFF1137243698CaA18EE364Cc966CF0e02A4e6327)
+        - admin type: Aave governance system.
+            - multisig timelock? YES: 24 hours.
+
+    #### Wrapped Aave Arbitrum wstETH - 0xe98fc055c99DECD8Da0c111B090885d5d15C774E
+    - upgradeable component: `StataTokenV2` ([arbitrum:0xe98fc055c99DECD8Da0c111B090885d5d15C774E](https://arbiscan.io/address/0xe98fc055c99DECD8Da0c111B090885d5d15C774E#readProxyContract))
+        - admin address: [arbitrum:0xFF1137243698CaA18EE364Cc966CF0e02A4e6327](https://arbiscan.io/address/0xFF1137243698CaA18EE364Cc966CF0e02A4e6327)
+        - admin type: Aave governance system.
+            - multisig timelock? YES: 24 hours.
+
+    #### Wrapped Aave Arbitrum USDT - 0xa6D12574eFB239FC1D2099732bd8b5dC6306897F
+    - upgradeable component: `StataTokenV2` ([arbitrum:0xa6D12574eFB239FC1D2099732bd8b5dC6306897F](https://arbiscan.io/address/0xa6D12574eFB239FC1D2099732bd8b5dC6306897F#readProxyContract))
+        - admin address: [arbitrum:0xFF1137243698CaA18EE364Cc966CF0e02A4e6327](https://arbiscan.io/address/0xFF1137243698CaA18EE364Cc966CF0e02A4e6327)
+        - admin type: Aave governance system.
+            - multisig timelock? YES: 24 hours.
+
+    #### Wrapped Aave Arbitrum LINK - 0xEAB84053B99f2ec4433F5121A1CB1524c8c998F8
+    - upgradeable component: `StataTokenV2` ([arbitrum:0xEAB84053B99f2ec4433F5121A1CB1524c8c998F8](https://arbiscan.io/address/0xEAB84053B99f2ec4433F5121A1CB1524c8c998F8#readProxyContract))
+        - admin address: [arbitrum:0xFF1137243698CaA18EE364Cc966CF0e02A4e6327](https://arbiscan.io/address/0xFF1137243698CaA18EE364Cc966CF0e02A4e6327)
+        - admin type: Aave governance system.
+            - multisig timelock? YES: 24 hours.
+
+    #### Wrapped Aave Arbitrum ARB - 0xf09EDbF2655B2A56753bD60D22CeAB2AC5D04188
+    - upgradeable component: `StataTokenV2` ([arbitrum:0xf09EDbF2655B2A56753bD60D22CeAB2AC5D04188](https://arbiscan.io/address/0xf09EDbF2655B2A56753bD60D22CeAB2AC5D04188#readProxyContract))
+        - admin address: [arbitrum:0xFF1137243698CaA18EE364Cc966CF0e02A4e6327](https://arbiscan.io/address/0xFF1137243698CaA18EE364Cc966CF0e02A4e6327)
+        - admin type: Aave governance system.
+            - multisig timelock? YES: 24 hours.
+
+    #### Wrapped Aave Arbitrum rEth - 0xbB8A61425DFE172AA3a6f882aAFaBA00B32b7d59
+    - upgradeable component: `StataTokenV2` ([arbitrum:0xbB8A61425DFE172AA3a6f882aAFaBA00B32b7d59](https://arbiscan.io/address/0xbB8A61425DFE172AA3a6f882aAFaBA00B32b7d59))
+        - admin address: [arbitrum:0xFF1137243698CaA18EE364Cc966CF0e02A4e6327](https://arbiscan.io/address/0xFF1137243698CaA18EE364Cc966CF0e02A4e6327)
+        - admin type: Aave governance system.
+            - multisig timelock? YES: 24 hours.
+
+    #### Wrapped Aave Arbitrum DAI - 0xf253BD61aEd0E9D62523eA76CD6F38B4a51dA145
+    - upgradeable component: `StataTokenV2` ([arbitrum:0xf253BD61aEd0E9D62523eA76CD6F38B4a51dA145](https://arbiscan.io/address/0xf253BD61aEd0E9D62523eA76CD6F38B4a51dA145#readProxyContract))
+        - admin address: [arbitrum:0xFF1137243698CaA18EE364Cc966CF0e02A4e6327](https://arbiscan.io/address/0xFF1137243698CaA18EE364Cc966CF0e02A4e6327)
+        - admin type: Aave governance system.
+            - multisig timelock? YES: 24 hours.
+
+    #### Wrapped Aave Arbitrum USDC - 0xE6D5923281c89DC989D00817387292387552d5C1
+    - upgradeable component: `StataTokenV2` ([arbitrum:0xE6D5923281c89DC989D00817387292387552d5C1](https://arbiscan.io/address/0xE6D5923281c89DC989D00817387292387552d5C1#readProxyContract))
+        - admin address: [arbitrum:0xFF1137243698CaA18EE364Cc966CF0e02A4e6327](https://arbiscan.io/address/0xFF1137243698CaA18EE364Cc966CF0e02A4e6327)
+        - admin type: Aave governance system.
+            - multisig timelock? YES: 24 hours.
+
+    #### Wrapped Aave Arbitrum GHO - 0xD089B4cb88Dacf4e27be869A00e9f7e2E3C18193
+    - upgradeable component: `StataTokenV2` ([arbitrum:0xD089B4cb88Dacf4e27be869A00e9f7e2E3C18193](https://arbiscan.io/address/0xD089B4cb88Dacf4e27be869A00e9f7e2E3C18193#readProxyContract))
+        - admin address: [arbitrum:0xFF1137243698CaA18EE364Cc966CF0e02A4e6327](https://arbiscan.io/address/0xFF1137243698CaA18EE364Cc966CF0e02A4e6327)
+        - admin type: Aave governance system.
+            - multisig timelock? YES: 24 hours.
+
 ### Common Manipulation Vectors
 - [ ] The ERC4626 Vault is susceptible to donation attacks.
 
@@ -183,5 +268,14 @@ The outlined ERC4626 Vaults should work well with Balancer pools. Upgradeability
 - cbETH [base:0x5e8B674127B321DC344c078e58BBACc3f3008962](https://github.com/balancer/balancer-v3-erc4626-tests/blob/208e800c185f59d3e57f4f228932af59d0458b29/test/base/ERC4626BaseAaveCbETH.t.sol#L20)
 - USDbC [base:0x74D4D1D440c9679b1013999Bd91507eAa2fff651](https://github.com/balancer/balancer-v3-erc4626-tests/blob/208e800c185f59d3e57f4f228932af59d0458b29/test/base/ERC4626BaseAaveUSDbC.t.sol#L20)
 - ezETH [base:0xF8F10f39116716e89498c1c5E94137ADa11b2BC7](https://github.com/balancer/balancer-v3-erc4626-tests/blob/208e800c185f59d3e57f4f228932af59d0458b29/test/base/ERC4626BaseAaveEzETH.t.sol#L20)
-
-
+- ARB: [arbitrum:0xf09EDbF2655B2A56753bD60D22CeAB2AC5D04188](https://github.com/balancer/balancer-v3-erc4626-tests/blob/aave-arbitrum/test/arbitrum/ERC4626ArbitrumAaveARB.t.sol)
+- DAI: [arbitrum:0xf253BD61aEd0E9D62523eA76CD6F38B4a51dA145](https://github.com/balancer/balancer-v3-erc4626-tests/blob/aave-arbitrum/test/arbitrum/ERC4626ArbitrumAaveDAI.t.sol)
+- GHO: [arbitrum:0xD089B4cb88Dacf4e27be869A00e9f7e2E3C18193](https://github.com/balancer/balancer-v3-erc4626-tests/blob/aave-arbitrum/test/arbitrum/ERC4626ArbitrumAaveGHO.t.sol)
+- LINK: [arbitrum:0xEAB84053B99f2ec4433F5121A1CB1524c8c998F8](https://github.com/balancer/balancer-v3-erc4626-tests/blob/aave-arbitrum/test/arbitrum/ERC4626ArbitrumAaveLINK.t.sol)
+- RETH: [arbitrum:0xbB8A61425DFE172AA3a6f882aAFaBA00B32b7d59](https://github.com/balancer/balancer-v3-erc4626-tests/blob/aave-arbitrum/test/arbitrum/ERC4626ArbitrumAaveRETH.t.sol)
+- USDC.e [arbitrum:0xE6D5923281c89DC989D00817387292387552d5C1](https://github.com/balancer/balancer-v3-erc4626-tests/blob/aave-arbitrum/test/arbitrum/ERC4626ArbitrumAaveUSDCe.t.sol)
+- USDC.n [arbitrum:0x7F6501d3B98eE91f9b9535E4b0ac710Fb0f9e0bc](https://github.com/balancer/balancer-v3-erc4626-tests/blob/aave-arbitrum/test/arbitrum/ERC4626ArbitrumAaveUSDCn.t.sol)
+- USDT: [arbitrum:0xa6D12574eFB239FC1D2099732bd8b5dC6306897F](https://github.com/balancer/balancer-v3-erc4626-tests/blob/aave-arbitrum/test/arbitrum/ERC4626ArbitrumAaveUSDT.t.sol)
+- aWBTC: [arbitrum:0x52Dc1FEeFA4f9a99221F93D79da46Ae89b8c0967](https://github.com/balancer/balancer-v3-erc4626-tests/blob/aave-arbitrum/test/arbitrum/ERC4626ArbitrumAaveWBTC.t.sol)
+- aWeETH: [arbitrum:0xD9E3Ef2c12de90E3b03F7b7E3964956a71920d40](https://github.com/balancer/balancer-v3-erc4626-tests/blob/aave-arbitrum/test/arbitrum/ERC4626ArbitrumAaveWeETH.t.sol)
+- awstETH: [arbitrum:0xe98fc055c99DECD8Da0c111B090885d5d15C774E](https://github.com/balancer/balancer-v3-erc4626-tests/blob/aave-arbitrum/test/arbitrum/ERC4626ArbitrumAaveWstETH.t.sol)
diff --git a/erc4626/registry.json b/erc4626/registry.json
@@ -1,4 +1,90 @@
 {
+  "arbitrum": {
+    "0x4cE13a79f45C1Be00BdABD38B764aC28C082704E": {
+      "asset": "0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",
+      "name": "Wrapped Aave Arbitrum WETH",
+      "summary": "safe",
+      "review": "./StatATokenV2Review.md",
+      "warnings": []
+    },
+    "0xcdAa68ce322728FE4185a60f103C194F1E2c47BC": {
+      "asset": "0x35751007a407ca6FEFfE80b3cB397736D2cf4dbe",
+      "name": "Wrapped Aave Arbitrum weETH",
+      "summary": "safe",
+      "review": "./StatATokenV2Review.md",
+      "warnings": []
+    },
+    "0x52Dc1FEeFA4f9a99221F93D79da46Ae89b8c0967": {
+      "asset": "0x2f2a2543B76A4166549F7aaB2e75Bef0aefC5B0f",
+      "name": "Wrapped Aave Arbitrum WBTC",
+      "summary": "safe",
+      "review": "./StatATokenV2Review.md",
+      "warnings": []
+    },
+    "0x7F6501d3B98eE91f9b9535E4b0ac710Fb0f9e0bc": {
+      "asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
+      "name": "Wrapped Aave Arbitrum USDCn",
+      "summary": "safe",
+      "review": "./StatATokenV2Review.md",
+      "warnings": []
+    },
+    "0xe98fc055c99DECD8Da0c111B090885d5d15C774E": {
+      "asset": "0x5979D7b546E38E414F7E9822514be443A4800529",
+      "name": "Wrapped Aave Arbitrum wstETH",
+      "summary": "safe",
+      "review": "./StatATokenV2Review.md",
+      "warnings": []
+    },
+    "0xa6D12574eFB239FC1D2099732bd8b5dC6306897F": {
+      "asset": "0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9",
+      "name": "Wrapped Aave Arbitrum USDT",
+      "summary": "safe",
+      "review": "./StatATokenV2Review.md",
+      "warnings": []
+    },
+    "0xEAB84053B99f2ec4433F5121A1CB1524c8c998F8": {
+      "asset": "0xf97f4df75117a78c1A5a0DBb814Af92458539FB4",
+      "name": "Wrapped Aave Arbitrum LINK",
+      "summary": "safe",
+      "review": "./StatATokenV2Review.md",
+      "warnings": []
+    },
+    "0xf09EDbF2655B2A56753bD60D22CeAB2AC5D04188": {
+      "asset": "0x912CE59144191C1204E64559FE8253a0e49E6548",
+      "name": "WWrapped Aave Arbitrum ARB",
+      "summary": "safe",
+      "review": "./StatATokenV2Review.md",
+      "warnings": []
+    },
+    "0xbB8A61425DFE172AA3a6f882aAFaBA00B32b7d59": {
+      "asset": "0xEC70Dcb4A1EFa46b8F2D97C310C9c4790ba5ffA8",
+      "name": "Wrapped Aave Arbitrum rETH",
+      "summary": "safe",
+      "review": "./StatATokenV2Review.md",
+      "warnings": []
+    },
+    "0xf253BD61aEd0E9D62523eA76CD6F38B4a51dA145": {
+      "asset": "0xDA10009cBd5D07dd0CeCc66161FC93D7c9000da1",
+      "name": "Wrapped Aave Arbitrum DAI",
+      "summary": "safe",
+      "review": "./StatATokenV2Review.md",
+      "warnings": []
+    },
+    "0xE6D5923281c89DC989D00817387292387552d5C1": {
+      "asset": "0xFF970A61A04b1cA14834A43f5dE4533eBDDB5CC8",
+      "name": "Wrapped Aave Arbitrum USDC",
+      "summary": "safe",
+      "review": "./StatATokenV2Review.md",
+      "warnings": []
+    },
+    "0xD089B4cb88Dacf4e27be869A00e9f7e2E3C18193": {
+      "asset": "0x7dfF72693f6A4149b17e7C6314655f6A9F7c8B33",
+      "name": "Wrapped Aave Arbitrum GHO",
+      "summary": "safe",
+      "review": "./StatATokenV2Review.md",
+      "warnings": []
+    }
+  },
   "base": {
     "0xe298b938631f750DD409fB18227C4a23dCdaab9b": {
       "asset": "0x4200000000000000000000000000000000000006",