[VPD-29]: Risk Steward V2 by GitGuru7 · Pull Request #163 · VenusProtocol/governance-contracts

GitGuru7 · 2025-11-25T14:36:26Z

Description

Resolves #

…upport

Co-authored-by: Debugger022 <104391977+Debugger022@users.noreply.github.com>

[VPD-29]: Risk Stewards Hashdit Audit

[VPD-29]: Risk Stewards Quantstamp Audit

[VPD-29]: Risk Stewards Certik Audit

Fix/vpd 29 quantstamp audit

fred-venus · 2026-02-12T04:33:19Z

merge this as the vip is about to propose

## 2.14.0-dev.3 (2026-02-24) * fix [VRR-17] [VRR-18] Missing Redundancy Check ([f4d3fcb](f4d3fcb)) * Merge branch 'acm-risk-steward' into feat/vpd-29-risk-steward-v2 ([bb363a6](bb363a6)) * Merge branch 'acm-risk-steward' of github.com:VenusProtocol/governance-contracts into acm-risk-stewa ([d3933dd](d3933dd)) * Merge branch 'develop' into acm-risk-steward ([2a74d81](2a74d81)) * Merge branch 'develop' into acm-risk-steward ([cabfdbb](cabfdbb)) * Merge branch 'develop' into acm-risk-steward ([81fe87e](81fe87e)) * Merge branch 'develop' into acm-risk-steward ([642da42](642da42)) * Merge pull request #115 from VenusProtocol/acm-risk-steward ([184ca48](184ca48)), closes [#115](#115) * Merge pull request #163 from VenusProtocol/feat/vpd-29-risk-steward-v2 ([157f54f](157f54f)), closes [#163](#163) * Merge pull request #164 from VenusProtocol/fix/vpd-29-hashdit-audit ([b5fade5](b5fade5)), closes [#164](#164) * Merge pull request #165 from VenusProtocol/fix/vpd-29-quantstamp-audit ([4a3c0b0](4a3c0b0)), closes [#165](#165) * Merge pull request #166 from VenusProtocol/fix/vpd-29-certik ([0e6202d](0e6202d)), closes [#166](#166) * Merge pull request #167 from VenusProtocol/fix/vpd-29-quantstamp-audit ([5cbda76](5cbda76)), closes [#167](#167) * Merge pull request #168 from VenusProtocol/fix/lz-config ([abe1456](abe1456)), closes [#168](#168) * Merge pull request #169 from VenusProtocol/ci/oidc-npm-publish ([07eecc9](07eecc9)), closes [#169](#169) * Revert "fix: ensure latest update always processed" ([7f3fd43](7f3fd43)) * Revert "fix: RSR-07 | Disabled Function Does Nothing" ([1895ef7](1895ef7)) * ci: fix hardhat compiler download failures ([f5124ff](f5124ff)) * ci: update node version in test job ([25c4d6c](25c4d6c)) * ci: use trusted publisher for npm release ([884ce23](884ce23)) * fix: 👕 lint line length ([3ca0283](3ca0283)) * fix: [I02] [I03] Code Optimization ([8349b9b](8349b9b)) * fix: [M01] ([687ecac](687ecac)) * fix: [M01] Timelock and expiration time mismatch may cause update execution failure ([b6ba91b](b6ba91b)) * fix: [S1] Inconfigurable REMOTE_DELAY ([aedaeb0](aedaeb0)) * fix: [S2] Missing Input Validation ([9967888](9967888)) * fix: [S3] Missing renounceOwnership() Override ([631a04f](631a04f)) * fix: [S4] ([c9b02ac](c9b02ac)) * fix: [S4] [S7] RiskOracle Mappings Can Be Improved ([1865fac](1865fac)) * fix: [S6] Code Clones ([fe4ea95](fe4ea95)) * fix: [S8] Inconsistent Error Handling ([a2612b2](a2612b2)) * fix: [S9] Misaligned Comments ([95b8efc](95b8efc)) * fix: [VEN-1] Multiple Debounce for Cross-Chain Calls ([d2ac393](d2ac393)) * fix: [VRR-01] Array Length Is Not Cached ([ec4ff8a](ec4ff8a)) * fix: [VRR-04] Discussion On Use Of OAppUpgradeable ([9ae58f7](9ae58f7)) * fix: [VRR-10] Missing Checks ([5b47b4f](5b47b4f)) * fix: [VRR-15] CollateralFactorsRiskSteward May Allow Unsupported Update Type ([9a46116](9a46116)) * fix: [VRR-16] delete Keyword Can Be Used ([0a55a89](0a55a89)) * fix: [VRR-20] Inconsistent Expiration Logic For Remote Updates ([9a03fcd](9a03fcd)) * fix: [VRR-21] Not All Contracts Disable Renouncing Ownership ([8a8f3e5](8a8f3e5)) * fix: [VRR-23] Incomplete/Missing Comments ([d6d20bb](d6d20bb)) * fix: [VRR-27] Misleading Name ([a93643d](a93643d)) * fix: add back deployments ([bce2526](bce2526)) * fix: add missing lz config for opbnbtestnet ([2d03418](2d03418)) * fix: add missing NatSpec and update custom error ([d10cdfe](d10cdfe)) * fix: after review (ts only) ([a7b2c11](a7b2c11)) * fix: CI checks ([4f1332c](4f1332c)) * fix: ci faliure ([244c349](244c349)) * fix: deployed on basesepolia ([d7b6f7f](d7b6f7f)) * fix: deployed on testnet ([61c48b1](61c48b1)) * fix: deployment script nonce issue ([ee81227](ee81227)) * fix: enforce id is the latest per market and type ([81beef1](81beef1)) * fix: enforce whitelisted executors for rejection and drop LI update support ([f02e723](f02e723)) * fix: ensure latest update always processed ([0fef56a](0fef56a)) * fix: extract modifier and update lz options ([bd71012](bd71012)) * fix: fixed lint ([257958e](257958e)) * fix: improve function names and events ([ae83d48](ae83d48)) * fix: lint ([515eec0](515eec0)) * fix: lint error ([78344c9](78344c9)) * fix: MCR-03 | Event Not Indexed ([2a9a302](2a9a302)) * fix: MCR-04 | Usage of Magic Numbers ([c28304a](c28304a)) * fix: MCR-06 | Unnecessary Inheritance ([594f67f](594f67f)) * fix: merge conflict ([a66f68e](a66f68e)) * fix: merge conflict ([0fbd181](0fbd181)) * fix: move auth check to external functions ([c0f9558](c0f9558)) * fix: pin to workspace ([d5120f9](d5120f9)) * fix: redeploy CF and IRM steward on sepolia ([0931021](0931021)) * fix: remove extra space ([3e7ed60](3e7ed60)) * fix: removed deployments ([d62deae](d62deae)) * fix: removed ds store ([c82388d](c82388d)) * fix: removed solcinputs ([5d27492](5d27492)) * fix: resolve comments ([274034f](274034f)) * fix: resolve pr comments ([9f3b290](9f3b290)) * fix: revert new line ([f997129](f997129)) * fix: revert timelock change ([8e6425a](8e6425a)) * fix: RIS-1Markets with Zero Caps Cannot Be Updated by the Risk Steward ([11ac996](11ac996)) * fix: RSR-01 | User-Defined Getters ([b19329a](b19329a)) * fix: RSR-02 | Repeat Calculation ([c4b8279](c4b8279)) * fix: RSR-05 | Missing Zero Address Validation ([dbb8aca](dbb8aca)) * fix: RSR-06 | Indexed Dynamic Data Type In Event ([52c41ee](52c41ee)) * fix: RSR-07 | Disabled Function Does Nothing ([63a2850](63a2850)) * fix: RSV-03 | Missing Input Validation ([665195a](665195a)) * fix: RSV-03 | Missing Input Validation ([e89efde](e89efde)) * fix: RSV-04 | Typos And Inconsistencies ([5e94c1c](5e94c1c)) * fix: RSV-05 | Unnecessary Imports ([f41a600](f41a600)) * fix: S1 Code NatSpec Improvements ([cf13d9f](cf13d9f)) * fix: S2 Upgradeable Contract Storage Gaps ([575e255](575e255)) * fix: S3 Gas Optimization in _decodeBytesToUint256() ([4db7862](4db7862)) * fix: S4 Ownership Can Be Renounced ([e4558bf](e4558bf)) * fix: streamline process-update ([d264915](d264915)) * fix: suppress oz upgrade-safety constructor error in tests ([98d9b43](98d9b43)) * fix: test ([b18d733](b18d733)) * fix: testnet deployments ([82f532a](82f532a)) * fix: tests ([4dc6a54](4dc6a54)) * fix: update mock access control init ([6ce419a](6ce419a)) * fix: update natspec ([7f20b3f](7f20b3f)) * fix: Update storage gap to account for constants ([0b927fe](0b927fe)) * fix: upgrade verify plugin ([17e3c9a](17e3c9a)) * fix: use timelock instead of guardian ([37c732b](37c732b)) * fix: VPB-01 | Missing Or Incomplete Natspec ([a774dd6](a774dd6)) * fix: yarn-lock ([13141c3](13141c3)) * fix: yarn-lock ([d0969cd](d0969cd)) * docs: add audit reports for Risk Stewards V1 ([210d1e5](210d1e5)) * docs: add audit reports for risk stewards v2 ([b4b9fc4](b4b9fc4)) * docs: update natspec to include shape of update ([d983c90](d983c90)) * feat: add CollateralFactorsRiskSteward ([857da07](857da07)) * feat: add deployment script ([a90ee9f](a90ee9f)) * feat: add deployment scripts ([94d7f21](94d7f21)) * feat: add fork test setup and required package upgrades ([07145c7](07145c7)) * feat: add IRMRiskSteward and refactor ([d931e80](d931e80)) * feat: add multichain updates support ([9b6f3e7](9b6f3e7)) * feat: add pause support ([c123c49](c123c49)) * feat: add risk steward ([ed3eeb7](ed3eeb7)) * feat: add risk steward deployemnts on bsctestnet and sepolia ([63102ae](63102ae)) * feat: add risk steward deployments for bscmainnet ([0fb8a5a](0fb8a5a)) * feat: add risk steward testnet deployments on all chains ([4539a76](4539a76)) * feat: add RiskOracle ([71a82c3](71a82c3)) * feat: add RiskSteward deployments ([56ce494](56ce494)) * feat: add testnet chaos labs risk oracle ([1dbe33c](1dbe33c)) * feat: add testnet deployments ([657fdd4](657fdd4)) * feat: add timelock support for risk-steward updates ([101ad3c](101ad3c)) * feat: allow immediate execution for safe-delta updates and refactor ([0efe2f5](0efe2f5)) * feat: bscmainnet deployment of RiskStewards ([90fd000](90fd000)) * feat: deploy on ethereum mainnet ([d2e81b5](d2e81b5)) * feat: deployed aggregator ([baa7bb8](baa7bb8)) * feat: deployed contracts ([5f526e5](5f526e5)) * feat: expose functions to fetch update types and their count ([0bd5888](0bd5888)) * feat: redeployed contracts ([3a2580e](3a2580e)) * feat: updating deployment files ([2c0da57](2c0da57)) * feat: updating deployment files ([097df33](097df33)) * feat: updating deployment files ([17d7db8](17d7db8)) * feat: updating deployment files ([3ef69fe](3ef69fe)) * feat: updating deployment files ([81d2d10](81d2d10)) * feat: updating deployment files ([42e4fa1](42e4fa1)) * feat: updating deployment files ([0673646](0673646)) * feat: updating deployment files ([15a6284](15a6284)) * feat: updating deployment files ([db527f1](db527f1)) * feat: updating deployment files ([d9d7684](d9d7684)) * revert: rollback base Sepolia deployments ([597cea2](597cea2)) * chore: 👕 ([2832d52](2832d52)) * chore: add missing configuration for bera bartio ([6bcefa9](6bcefa9)) * chore: fix natspec ([5504839](5504839)) * chore: lock ([25b81d6](25b81d6)) * chore: move to warn to avoid changing published contracts ([4032a2d](4032a2d)) * chore: remove unused Risk Steward v1 deployments ([d8792a2](d8792a2)) * chore: set ordering lint rule to error ([109ac05](109ac05)) * chore: update node version ([828a152](828a152)) * chore: update testnet deployments ([b625924](b625924)) * chore: yarn ([694b785](694b785)) * chore(release): 2.11.0-dev.1 [skip ci] ([489b03d](489b03d)) * refactor: add access control manager ([ef66f5e](ef66f5e)) * refactor: add risk param config validation ([8d600bb](8d600bb)) * refactor: allow resend-remote-update to pass optional fee ([2d81a84](2d81a84)) * refactor: break out update logic to specific contract ([d29694a](d29694a)) * refactor: check that constructor addresses are nonzero ([14f3668](14f3668)) * refactor: design improvements ([b12aa63](b12aa63)) * refactor: DestinationStewardReceiver ([f0bbad7](f0bbad7)) * refactor: execute-update to prevent reentrancy risk ([a074696](a074696)) * refactor: improvements in destination-steward-receiver ([3d3461e](3d3461e)) * refactor: initial refactor ([4e1cf5c](4e1cf5c)) * refactor: make riskParameterConfigs public ([147491b](147491b)) * refactor: make update types constants ([eb79014](eb79014)) * refactor: move gap to storage definition block ([b34dac1](b34dac1)) * refactor: natspecs and minor improvements ([5e9cefa](5e9cefa)) * refactor: optimize MaxIncreaseBpsUpdated event variables ([a0614ce](a0614ce)) * refactor: processUpdates must come from RiskStewardReceiver ([f24b93c](f24b93c)) * refactor: receiver contract ([66df110](66df110)) * refactor: remove Executable from UpdateStatus ([675e568](675e568)) * refactor: remove unnecessary complexity and streamline implementation ([2b03837](2b03837)) * refactor: rename market cap update types ([46a8f75](46a8f75)) * refactor: revert renounceOwnership ([ab5fd54](ab5fd54)) * refactor: support lower cap changes ([d6615aa](d6615aa)) * refactor: update events to include previous values, and toggle config active event ([9ef21ee](9ef21ee)) * refactor: update natspec ([90b22c2](90b22c2)) * refactor: use openzepplin paused ([9dc0613](9dc0613)) * test: add fork test to cover main execution paths ([66b0659](66b0659)) * test: add initial setup and cover main execution paths ([ae1fd50](ae1fd50)) * test: add risk-oracle unit tests ([fb1f0ef](fb1f0ef)) * test: cover failure scenarios ([37b89a7](37b89a7)) * test: extend coverage to all update type ([b2785e6](b2785e6))

## 2.14.0 (2026-04-10) * fix [VRR-17] [VRR-18] Missing Redundancy Check ([f4d3fcb](f4d3fcb)) * Merge branch 'acm-risk-steward' into feat/vpd-29-risk-steward-v2 ([bb363a6](bb363a6)) * Merge branch 'acm-risk-steward' of github.com:VenusProtocol/governance-contracts into acm-risk-stewa ([d3933dd](d3933dd)) * Merge branch 'develop' into acm-risk-steward ([2a74d81](2a74d81)) * Merge branch 'develop' into acm-risk-steward ([cabfdbb](cabfdbb)) * Merge branch 'develop' into acm-risk-steward ([81fe87e](81fe87e)) * Merge branch 'develop' into acm-risk-steward ([642da42](642da42)) * Merge pull request #115 from VenusProtocol/acm-risk-steward ([184ca48](184ca48)), closes [#115](#115) * Merge pull request #155 from VenusProtocol/chore/permissions ([b497cde](b497cde)), closes [#155](#155) * Merge pull request #157 from VenusProtocol/release/back.20250929 ([83cba7b](83cba7b)), closes [#157](#157) * Merge pull request #158 from VenusProtocol/fix/contract-verification ([b54bd1a](b54bd1a)), closes [#158](#158) * Merge pull request #159 from VenusProtocol/chore/slim-package ([c684ed0](c684ed0)), closes [#159](#159) * Merge pull request #160 from VenusProtocol/docs/sync-the-permissions ([ff01c99](ff01c99)), closes [#160](#160) * Merge pull request #161 from VenusProtocol/chore/slim-package ([516cd7d](516cd7d)), closes [#161](#161) * Merge pull request #162 from VenusProtocol/fix/slim-package ([4d93d6f](4d93d6f)), closes [#162](#162) * Merge pull request #163 from VenusProtocol/feat/vpd-29-risk-steward-v2 ([157f54f](157f54f)), closes [#163](#163) * Merge pull request #164 from VenusProtocol/fix/vpd-29-hashdit-audit ([b5fade5](b5fade5)), closes [#164](#164) * Merge pull request #165 from VenusProtocol/fix/vpd-29-quantstamp-audit ([4a3c0b0](4a3c0b0)), closes [#165](#165) * Merge pull request #166 from VenusProtocol/fix/vpd-29-certik ([0e6202d](0e6202d)), closes [#166](#166) * Merge pull request #167 from VenusProtocol/fix/vpd-29-quantstamp-audit ([5cbda76](5cbda76)), closes [#167](#167) * Merge pull request #168 from VenusProtocol/fix/lz-config ([abe1456](abe1456)), closes [#168](#168) * Merge pull request #169 from VenusProtocol/ci/oidc-npm-publish ([07eecc9](07eecc9)), closes [#169](#169) * Merge pull request #170 from VenusProtocol/feat/vpd-485-acm ([752235f](752235f)), closes [#170](#170) * Merge pull request #171 from VenusProtocol/develop ([213547a](213547a)), closes [#171](#171) * Revert "fix: ensure latest update always processed" ([7f3fd43](7f3fd43)) * Revert "fix: RSR-07 | Disabled Function Does Nothing" ([1895ef7](1895ef7)) * chore: 👕 ([2832d52](2832d52)) * chore: add missing configuration for bera bartio ([6bcefa9](6bcefa9)) * chore: fix natspec ([5504839](5504839)) * chore: lock ([25b81d6](25b81d6)) * chore: move to warn to avoid changing published contracts ([4032a2d](4032a2d)) * chore: remove unused Risk Steward v1 deployments ([d8792a2](d8792a2)) * chore: set ordering lint rule to error ([109ac05](109ac05)) * chore: update node version ([828a152](828a152)) * chore: update permissions granted on all networks ([752a623](752a623)) * chore: update permissions granted on bsc network ([57033f2](57033f2)) * chore: update permissions granted on bscmainnet ([466cbf8](466cbf8)) * chore: update testnet deployments ([b625924](b625924)) * chore: yarn ([694b785](694b785)) * chore: yarn.lock ([15ef0df](15ef0df)) * chore(release): 2.11.0-dev.1 [skip ci] ([489b03d](489b03d)) * chore(release): 2.13.1-dev.1 [skip ci] ([a8b086f](a8b086f)) * chore(release): 2.13.1-dev.2 [skip ci] ([c7577af](c7577af)) * chore(release): 2.14.0-dev.1 [skip ci] ([b013b94](b013b94)) * chore(release): 2.14.0-dev.2 [skip ci] ([dd04554](dd04554)) * chore(release): 2.14.0-dev.3 [skip ci] ([6ba9e89](6ba9e89)) * chore(release): 2.14.0-dev.4 [skip ci] ([d282460](d282460)) * chore(release): 2.14.0-dev.5 [skip ci] ([429105f](429105f)) * feat: add CollateralFactorsRiskSteward ([857da07](857da07)) * feat: add deployment script ([a90ee9f](a90ee9f)) * feat: add deployment scripts ([94d7f21](94d7f21)) * feat: add fork test setup and required package upgrades ([07145c7](07145c7)) * feat: add IRMRiskSteward and refactor ([d931e80](d931e80)) * feat: add multichain updates support ([9b6f3e7](9b6f3e7)) * feat: add pause support ([c123c49](c123c49)) * feat: add risk steward ([ed3eeb7](ed3eeb7)) * feat: add risk steward deployemnts on bsctestnet and sepolia ([63102ae](63102ae)) * feat: add risk steward deployments for bscmainnet ([0fb8a5a](0fb8a5a)) * feat: add risk steward testnet deployments on all chains ([4539a76](4539a76)) * feat: add RiskOracle ([71a82c3](71a82c3)) * feat: add RiskSteward deployments ([56ce494](56ce494)) * feat: add slim package scripts ([8f5df9c](8f5df9c)) * feat: add slim package scripts ([d3d36a5](d3d36a5)) * feat: add testnet chaos labs risk oracle ([1dbe33c](1dbe33c)) * feat: add testnet deployments ([657fdd4](657fdd4)) * feat: add timelock support for risk-steward updates ([101ad3c](101ad3c)) * feat: allow immediate execution for safe-delta updates and refactor ([0efe2f5](0efe2f5)) * feat: bscmainnet deployment of RiskStewards ([90fd000](90fd000)) * feat: deploy on ethereum mainnet ([d2e81b5](d2e81b5)) * feat: deployed aggregator ([baa7bb8](baa7bb8)) * feat: deployed contracts ([5f526e5](5f526e5)) * feat: expose functions to fetch update types and their count ([0bd5888](0bd5888)) * feat: pin ACM compiler version for deterministic builds ([53d5e23](53d5e23)) * feat: redeployed contracts ([3a2580e](3a2580e)) * feat: updating deployment files ([2c0da57](2c0da57)) * feat: updating deployment files ([097df33](097df33)) * feat: updating deployment files ([17d7db8](17d7db8)) * feat: updating deployment files ([3ef69fe](3ef69fe)) * feat: updating deployment files ([81d2d10](81d2d10)) * feat: updating deployment files ([42e4fa1](42e4fa1)) * feat: updating deployment files ([0673646](0673646)) * feat: updating deployment files ([15a6284](15a6284)) * feat: updating deployment files ([db527f1](db527f1)) * feat: updating deployment files ([d9d7684](d9d7684)) * build: accommodate the Trusted Publisher way to release ([e4152f6](e4152f6)) * ci: fix hardhat compiler download failures ([f5124ff](f5124ff)) * ci: update node version in test job ([25c4d6c](25c4d6c)) * ci: use trusted publisher for npm release ([884ce23](884ce23)) * fix: 👕 lint line length ([3ca0283](3ca0283)) * fix: [I02] [I03] Code Optimization ([8349b9b](8349b9b)) * fix: [M01] ([687ecac](687ecac)) * fix: [M01] Timelock and expiration time mismatch may cause update execution failure ([b6ba91b](b6ba91b)) * fix: [S1] Inconfigurable REMOTE_DELAY ([aedaeb0](aedaeb0)) * fix: [S2] Missing Input Validation ([9967888](9967888)) * fix: [S3] Missing renounceOwnership() Override ([631a04f](631a04f)) * fix: [S4] ([c9b02ac](c9b02ac)) * fix: [S4] [S7] RiskOracle Mappings Can Be Improved ([1865fac](1865fac)) * fix: [S6] Code Clones ([fe4ea95](fe4ea95)) * fix: [S8] Inconsistent Error Handling ([a2612b2](a2612b2)) * fix: [S9] Misaligned Comments ([95b8efc](95b8efc)) * fix: [VEN-1] Multiple Debounce for Cross-Chain Calls ([d2ac393](d2ac393)) * fix: [VRR-01] Array Length Is Not Cached ([ec4ff8a](ec4ff8a)) * fix: [VRR-04] Discussion On Use Of OAppUpgradeable ([9ae58f7](9ae58f7)) * fix: [VRR-10] Missing Checks ([5b47b4f](5b47b4f)) * fix: [VRR-15] CollateralFactorsRiskSteward May Allow Unsupported Update Type ([9a46116](9a46116)) * fix: [VRR-16] delete Keyword Can Be Used ([0a55a89](0a55a89)) * fix: [VRR-20] Inconsistent Expiration Logic For Remote Updates ([9a03fcd](9a03fcd)) * fix: [VRR-21] Not All Contracts Disable Renouncing Ownership ([8a8f3e5](8a8f3e5)) * fix: [VRR-23] Incomplete/Missing Comments ([d6d20bb](d6d20bb)) * fix: [VRR-27] Misleading Name ([a93643d](a93643d)) * fix: add back deployments ([bce2526](bce2526)) * fix: add missing lz config for opbnbtestnet ([2d03418](2d03418)) * fix: add missing NatSpec and update custom error ([d10cdfe](d10cdfe)) * fix: add repo URL ([e6db68d](e6db68d)) * fix: after review (ts only) ([a7b2c11](a7b2c11)) * fix: CI checks ([4f1332c](4f1332c)) * fix: ci faliure ([244c349](244c349)) * fix: deployed on basesepolia ([d7b6f7f](d7b6f7f)) * fix: deployed on testnet ([61c48b1](61c48b1)) * fix: deployment script nonce issue ([ee81227](ee81227)) * fix: enforce id is the latest per market and type ([81beef1](81beef1)) * fix: enforce whitelisted executors for rejection and drop LI update support ([f02e723](f02e723)) * fix: ensure latest update always processed ([0fef56a](0fef56a)) * fix: extract modifier and update lz options ([bd71012](bd71012)) * fix: fixed lint ([257958e](257958e)) * fix: improve function names and events ([ae83d48](ae83d48)) * fix: lint ([515eec0](515eec0)) * fix: lint error ([78344c9](78344c9)) * fix: MCR-03 | Event Not Indexed ([2a9a302](2a9a302)) * fix: MCR-04 | Usage of Magic Numbers ([c28304a](c28304a)) * fix: MCR-06 | Unnecessary Inheritance ([594f67f](594f67f)) * fix: merge conflict ([a66f68e](a66f68e)) * fix: merge conflict ([0fbd181](0fbd181)) * fix: move auth check to external functions ([c0f9558](c0f9558)) * fix: NPM token env var ([9fcaf7e](9fcaf7e)) * fix: pin to workspace ([d5120f9](d5120f9)) * fix: redeploy CF and IRM steward on sepolia ([0931021](0931021)) * fix: remove extra space ([3e7ed60](3e7ed60)) * fix: removed deployments ([d62deae](d62deae)) * fix: removed ds store ([c82388d](c82388d)) * fix: removed solcinputs ([5d27492](5d27492)) * fix: resolve comments ([274034f](274034f)) * fix: resolve pr comments ([9f3b290](9f3b290)) * fix: revert bnbmainnet permission updates ([34b53a3](34b53a3)) * fix: revert new line ([f997129](f997129)) * fix: revert timelock change ([8e6425a](8e6425a)) * fix: RIS-1Markets with Zero Caps Cannot Be Updated by the Risk Steward ([11ac996](11ac996)) * fix: RSR-01 | User-Defined Getters ([b19329a](b19329a)) * fix: RSR-02 | Repeat Calculation ([c4b8279](c4b8279)) * fix: RSR-05 | Missing Zero Address Validation ([dbb8aca](dbb8aca)) * fix: RSR-06 | Indexed Dynamic Data Type In Event ([52c41ee](52c41ee)) * fix: RSR-07 | Disabled Function Does Nothing ([63a2850](63a2850)) * fix: RSV-03 | Missing Input Validation ([665195a](665195a)) * fix: RSV-03 | Missing Input Validation ([e89efde](e89efde)) * fix: RSV-04 | Typos And Inconsistencies ([5e94c1c](5e94c1c)) * fix: RSV-05 | Unnecessary Imports ([f41a600](f41a600)) * fix: S1 Code NatSpec Improvements ([cf13d9f](cf13d9f)) * fix: S2 Upgradeable Contract Storage Gaps ([575e255](575e255)) * fix: S3 Gas Optimization in _decodeBytesToUint256() ([4db7862](4db7862)) * fix: S4 Ownership Can Be Renounced ([e4558bf](e4558bf)) * fix: streamline process-update ([d264915](d264915)) * fix: suppress oz upgrade-safety constructor error in tests ([98d9b43](98d9b43)) * fix: test ([b18d733](b18d733)) * fix: testnet deployments ([82f532a](82f532a)) * fix: tests ([4dc6a54](4dc6a54)) * fix: update mock access control init ([6ce419a](6ce419a)) * fix: update natspec ([7f20b3f](7f20b3f)) * fix: Update storage gap to account for constants ([0b927fe](0b927fe)) * fix: upgrade verify plugin ([17e3c9a](17e3c9a)) * fix: use hardhat verify ([d2f1158](d2f1158)) * fix: use timelock instead of guardian ([37c732b](37c732b)) * fix: VPB-01 | Missing Or Incomplete Natspec ([a774dd6](a774dd6)) * fix: yarn-lock ([13141c3](13141c3)) * fix: yarn-lock ([d0969cd](d0969cd)) * docs: add audit reports for Risk Stewards V1 ([210d1e5](210d1e5)) * docs: add audit reports for risk stewards v2 ([b4b9fc4](b4b9fc4)) * docs: update natspec to include shape of update ([d983c90](d983c90)) * revert: rollback base Sepolia deployments ([597cea2](597cea2)) * refactor: add access control manager ([ef66f5e](ef66f5e)) * refactor: add risk param config validation ([8d600bb](8d600bb)) * refactor: allow resend-remote-update to pass optional fee ([2d81a84](2d81a84)) * refactor: break out update logic to specific contract ([d29694a](d29694a)) * refactor: check that constructor addresses are nonzero ([14f3668](14f3668)) * refactor: design improvements ([b12aa63](b12aa63)) * refactor: DestinationStewardReceiver ([f0bbad7](f0bbad7)) * refactor: execute-update to prevent reentrancy risk ([a074696](a074696)) * refactor: improvements in destination-steward-receiver ([3d3461e](3d3461e)) * refactor: initial refactor ([4e1cf5c](4e1cf5c)) * refactor: make riskParameterConfigs public ([147491b](147491b)) * refactor: make update types constants ([eb79014](eb79014)) * refactor: move gap to storage definition block ([b34dac1](b34dac1)) * refactor: natspecs and minor improvements ([5e9cefa](5e9cefa)) * refactor: optimize MaxIncreaseBpsUpdated event variables ([a0614ce](a0614ce)) * refactor: processUpdates must come from RiskStewardReceiver ([f24b93c](f24b93c)) * refactor: receiver contract ([66df110](66df110)) * refactor: remove Executable from UpdateStatus ([675e568](675e568)) * refactor: remove unnecessary complexity and streamline implementation ([2b03837](2b03837)) * refactor: rename market cap update types ([46a8f75](46a8f75)) * refactor: revert renounceOwnership ([ab5fd54](ab5fd54)) * refactor: support lower cap changes ([d6615aa](d6615aa)) * refactor: update events to include previous values, and toggle config active event ([9ef21ee](9ef21ee)) * refactor: update natspec ([90b22c2](90b22c2)) * refactor: use openzepplin paused ([9dc0613](9dc0613)) * test: add fork test to cover main execution paths ([66b0659](66b0659)) * test: add initial setup and cover main execution paths ([ae1fd50](ae1fd50)) * test: add risk-oracle unit tests ([fb1f0ef](fb1f0ef)) * test: cover failure scenarios ([37b89a7](37b89a7)) * test: extend coverage to all update type ([b2785e6](b2785e6)) * cd: publish slim package ([8753311](8753311)) * cd: publish slim package ([327c96f](327c96f))

GitGuru7 added 4 commits November 21, 2025 17:42

refactor: initial refactor

4e1cf5c

feat: add RiskOracle

71a82c3

feat: add timelock support for risk-steward updates

101ad3c

refactor: receiver contract

66df110