Trail of Bits Audit

🔧 scETH, scUSDCv2, scLUSD & sQuartz 🔧 have now been audited by Trail of Bits and launched on mainnet.

Deployment addresses

• scETH (mainnet): address, tx
• CompoundV3ScWethAdapter (mainnet): address, tx
• MorphoAaveV3ScWethAdapter (mainnet): address, tx
• AaveV3ScWethAdapter (mainnet): address, tx
• scUSDCv2 (mainnet): address, tx
• MorphoAaveV3ScUsdcAdapter (mainnet): address, tx
• AaveV2ScUsdcAdapter (mainnet): address, tx
• AaveV3ScUsdcAdapter (mainnet): address, tx
• PriceConverter (mainnet): address, tx
• Swapper (mainnet): address, tx
• scLUSD (mainnet): address, tx
• sQuartz (sepolia): address

What's Changed

• [TOB-SANDCLOCK-1] account for flashloan fees by @dxganta in #84
• [TOB-SANDCLOCK-2] derive new rewards from balance instead of user input by @brkomir in #85
• [TOB-SANDCLOCK-3/4] maintain float balance on withdrawals by @brkomir in #92
• [TOB-SANDCLOCK-5] address lido stake rate limit scenario by @dxganta in #100
• [TOB-SANDCLOCK-6] use Liquity USD/ETH dual-oracle for scLUSD by @coolhill in #101
• script for scUSDCv2 rebalancing scenarios by @brkomir in #97
• remove "slippageTolerance" from scWETHv2 constructor by @brkomir in #95
• document the decision of not including LQTY into total assets by @brkomir in #94
• move constants to Constants.sol by @brkomir in #89
• add fv report by @0xBRM in #90
• simplify reward and bonus calculations by @brkomir in #86
• rename adapters to differentiate usage between scUSDCv2 & scWETHv2 by @brkomir in #91
• deploy script for v2 vaults by @brkomir in #83
• ignore empty multi-call calldata by @brkomir in #96

Full Changelog: v0.1.2...v0.1.3