WatchPug Audit

🔧 scWETH & scUSDC 🔧 strategies have now been audited by WatchPug and launched on mainnet. Additional internal security efforts include full unit test coverage, applying Certora formal verification on a subset of properties(scUSDC & scWETH) and running Trail of Bits pre-built echidna ERC4626 properties (report).

Deployment addresses

• scWETH (mainnet): address, tx
• scUSDC (mainnet): address, tx
• scWETH (sepolia): address, tx
• scUSDC (sepolia): address, tx

What's Changed

• [WP-C1] add flashloan initiator check by @dxganta in #62
• [WP-H2] extracted profit selling logic from rebalance into a separate function by @brkomir in #65
• [WP-M4] scUSDC rebalance ignores return value on disinvest by @brkomir in #57
• [WP-L5] fixed loss of precision for weth->usdc price calculation by @brkomir in #63
• [WP-L8] checking min balance in scUSDC on 'exitAllPositions' by @brkomir in #67
• [WP-L9] using aave api to get ltv in scUSDC & scWETH by @brkomir in #64
• simplify fee conversion by @dxganta in #47
• fix profit calculation to exclude new deposits by @coolhill in #50
• removed depositIntoStrategy, since it was redundant by @dxganta in #51
• testnet & unit test mocks by @brkomir in #56
• add fixtures to local deployment by @0xrin1 in #61
• use existing MockUSDC for goerli instead of new deploy by @0xrin1 in #59

Full Changelog: v0.1.0...v0.1.1