Fixes after Bailsec audit to new withdrawal flow#171

Open

grkamil wants to merge 35 commits intofeat/new-withdrawal-flowfrom

feat/new-withdrawal-flow-after-audit

Commits on Jun 18, 2025

Fix issue: Storage collision due to increasing the storage gap
grkamil
committed
Fix issue: Emergency withdrawals that the MellowVault processes instantly will cause accounting issues
grkamil
committed
Fix issue: The ratioFeed shall be legacy
grkamil
committed
Fix issue: Withdrawal Epoch Can Get Permanently Stuck if a Symbiotic Vault Is 100% Slashed
grkamil
committed
Fix issue: All Epochs Incorrectly Marked as "Slashed" Due to Yield and Rounding
grkamil
committed
Fix issue: Some functions can be griefed via a tiny donation
grkamil
committed
Fix issue: withdraw() will queue less tokens than expected
grkamil
committed
Fix issue: Wrong event emission, the old reward treasury is emitted instead of the new one
grkamil
committed
Fix issue: Precision loss due to division before multiplication
grkamil
committed
Fix issue: DoS When Depositing Into Strategies Deployed via EigenLayer Factory
grkamil
committed
Fix issue: The withdrawer field in QueuedWithdrawalParams is now deprecated
grkamil
committed
Fix issue: Unnecessary approval to strategyManager
grkamil
committed
Fix issue: claimableWithdrawalAmount can’t query the claimableAssetsOf() for emergency withdrawals
grkamil
committed
Fix issue: claimAdapterFreeBalance and claimAdapterRewards are missing the whenNotPaused modifier
grkamil
committed
Fix issue: mint() may return more shares than requested
grkamil
committed
Fix issue: Funds from Mellow Withdrawals Can Be Taken by Other Users
grkamil
committed
Fix issue: adapterUndelegated is reset on _undelegate()
grkamil
committed
Fix issue: DoS on delegate() When Depositing More stETH Than Available
grkamil
committed
Fix issue: rewardsTimeline is not initialized
grkamil
committed
Fix issue: migrateDepositBonus Fails to Update Bonus Tracking on Target Vault
grkamil
committed
Fix issue: Slashing will be missed in an edge case
grkamil
committed
Fix issue: IBaseAdapter should add a storage gap
grkamil
committed
Fix issue: DoS when using tokens that don’t return a bool on approval
grkamil
committed
Fix issue: Insufficient validation when removing a Mellow vault
grkamil
committed
tests: remove ratio feed from tests
grkamil
committed
tests: remove check to adapters counter
grkamil
committed
tests: fix removeVault and removeAdapter usage
grkamil
committed
tests: fix according new function arguments
grkamil
committed
tests: fix migrateBonusDeposit tests
grkamil
committed
tests: test for issue Wrong event emission, the old reward treasury is emitted instead of the new one
grkamil
committed
tests: test for issue rewardsTimeline is not initialized
grkamil
committed
tests: test for issue Funds from Mellow Withdrawals Can Be Taken by Other Users
grkamil
committed

Commits on Jun 19, 2025