@ballkidz/defifa 0.0.24 → 0.0.26

package/test/audit/AttestationDoubleCount.t.sol

@@ -1,218 +0,0 @@
-// SPDX-License-Identifier: UNLICENSED
-pragma solidity 0.8.28;
-
-import {TestBaseWorkflow} from "@bananapus/core-v6/test/helpers/TestBaseWorkflow.sol";
-
-import {DefifaGovernor} from "../../src/DefifaGovernor.sol";
-import {DefifaDeployer} from "../../src/DefifaDeployer.sol";
-import {DefifaHook} from "../../src/DefifaHook.sol";
-import {DefifaTokenUriResolver} from "../../src/DefifaTokenUriResolver.sol";
-import {JB721TiersHookStore} from "@bananapus/721-hook-v6/src/JB721TiersHookStore.sol";
-
-import {JBTest} from "@bananapus/core-v6/test/helpers/JBTest.sol";
-import {JBRulesetMetadataResolver} from "@bananapus/core-v6/src/libraries/JBRulesetMetadataResolver.sol";
-import {JBRuleset} from "@bananapus/core-v6/src/structs/JBRuleset.sol";
-import {JBAddressRegistry} from "@bananapus/address-registry-v6/src/JBAddressRegistry.sol";
-
-import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";
-import {ITypeface} from "lib/typeface/contracts/interfaces/ITypeface.sol";
-import {IJB721TokenUriResolver} from "@bananapus/721-hook-v6/src/interfaces/IJB721TokenUriResolver.sol";
-import {DefifaLaunchProjectData} from "../../src/structs/DefifaLaunchProjectData.sol";
-import {DefifaTierParams} from "../../src/structs/DefifaTierParams.sol";
-import {JBAccountingContext} from "@bananapus/core-v6/src/structs/JBAccountingContext.sol";
-import {JBTerminalConfig} from "@bananapus/core-v6/src/structs/JBTerminalConfig.sol";
-import {JBRulesetConfig} from "@bananapus/core-v6/src/structs/JBRulesetConfig.sol";
-import {JBRulesetMetadata} from "@bananapus/core-v6/src/structs/JBRulesetMetadata.sol";
-import {JBSplitGroup} from "@bananapus/core-v6/src/structs/JBSplitGroup.sol";
-import {JBFundAccessLimitGroup} from "@bananapus/core-v6/src/structs/JBFundAccessLimitGroup.sol";
-import {JBSplit} from "@bananapus/core-v6/src/structs/JBSplit.sol";
-import {JBConstants} from "@bananapus/core-v6/src/libraries/JBConstants.sol";
-import {JBCurrencyIds} from "@bananapus/core-v6/src/libraries/JBCurrencyIds.sol";
-import {IJBRulesetApprovalHook} from "@bananapus/core-v6/src/interfaces/IJBRulesetApprovalHook.sol";
-
-contract AttestationDoubleCountTest is JBTest, TestBaseWorkflow {
-    using JBRulesetMetadataResolver for JBRuleset;
-
-    uint256 internal _protocolFeeProjectId;
-    uint256 internal _defifaProjectId;
-
-    DefifaDeployer internal deployer;
-    DefifaHook internal hook;
-    DefifaGovernor internal governor;
-
-    uint256 internal _mintPhaseStart;
-
-    function setUp() public virtual override {
-        super.setUp();
-
-        JBAccountingContext[] memory _tokens = new JBAccountingContext[](1);
-        _tokens[0] = JBAccountingContext({token: JBConstants.NATIVE_TOKEN, decimals: 18, currency: JBCurrencyIds.ETH});
-
-        JBTerminalConfig[] memory terminalConfigs = new JBTerminalConfig[](1);
-        terminalConfigs[0] = JBTerminalConfig({terminal: jbMultiTerminal(), accountingContextsToAccept: _tokens});
-
-        JBRulesetConfig[] memory rulesetConfigs = new JBRulesetConfig[](1);
-        rulesetConfigs[0] = JBRulesetConfig({
-            mustStartAtOrAfter: 0,
-            duration: 10 days,
-            weight: 1e18,
-            weightCutPercent: 0,
-            approvalHook: IJBRulesetApprovalHook(address(0)),
-            metadata: JBRulesetMetadata({
-                reservedPercent: 0,
-                cashOutTaxRate: 0,
-                baseCurrency: JBCurrencyIds.ETH,
-                pausePay: false,
-                pauseCreditTransfers: false,
-                allowOwnerMinting: false,
-                allowSetCustomToken: false,
-                allowTerminalMigration: false,
-                allowSetTerminals: false,
-                allowSetController: false,
-                allowAddAccountingContext: false,
-                allowAddPriceFeed: false,
-                ownerMustSendPayouts: false,
-                holdFees: false,
-                useTotalSurplusForCashOuts: false,
-                useDataHookForPay: true,
-                useDataHookForCashOut: true,
-                dataHook: address(0),
-                metadata: 0
-            }),
-            splitGroups: new JBSplitGroup[](0),
-            fundAccessLimitGroups: new JBFundAccessLimitGroup[](0)
-        });
-
-        address projectOwner = address(bytes20(keccak256("projectOwner")));
-
-        _protocolFeeProjectId =
-            jbController().launchProjectFor(address(projectOwner), "", rulesetConfigs, terminalConfigs, "");
-        vm.prank(projectOwner);
-        address _nanaToken =
-            address(jbController().deployERC20For(_protocolFeeProjectId, "Bananapus", "NANA", bytes32(0)));
-
-        _defifaProjectId =
-            jbController().launchProjectFor(address(projectOwner), "", rulesetConfigs, terminalConfigs, "");
-        vm.prank(projectOwner);
-        address _defifaToken = address(jbController().deployERC20For(_defifaProjectId, "Defifa", "DEFIFA", bytes32(0)));
-
-        hook = new DefifaHook(jbDirectory(), IERC20(_defifaToken), IERC20(_nanaToken));
-        governor = new DefifaGovernor(jbController(), address(this));
-        deployer = new DefifaDeployer(
-            address(hook),
-            new DefifaTokenUriResolver(ITypeface(address(0))),
-            governor,
-            jbController(),
-            new JBAddressRegistry(),
-            _defifaProjectId,
-            _protocolFeeProjectId
-        );
-
-        hook.transferOwnership(address(deployer));
-        governor.transferOwnership(address(deployer));
-    }
-
-    function test_attestationUnitsDuplicateAfterBeneficiaryTransfer() external {
-        address payer = address(bytes20(keccak256("payer")));
-        address beneficiary = address(bytes20(keccak256("beneficiary")));
-        address recipient = address(bytes20(keccak256("recipient")));
-
-        (uint256 projectId, DefifaHook nft) = _launchGame();
-        vm.warp(_mintPhaseStart);
-
-        vm.deal(payer, 1 ether);
-        uint16[] memory tierIds = new uint16[](1);
-        tierIds[0] = 1;
-        bytes memory metadata = _buildPayMetadata(abi.encode(address(0), tierIds));
-
-        vm.prank(payer);
-        jbMultiTerminal().pay{value: 1 ether}({
-            projectId: projectId,
-            token: JBConstants.NATIVE_TOKEN,
-            amount: 1 ether,
-            beneficiary: beneficiary,
-            minReturnedTokens: 0,
-            memo: "",
-            metadata: metadata
-        });
-
-        uint256 totalUnitsBefore = nft.getTierTotalAttestationUnitsOf(1);
-        uint256 beneficiaryUnitsBefore = nft.getTierAttestationUnitsOf(beneficiary, 1);
-        assertGt(totalUnitsBefore, 0, "tier should have nonzero attestation units");
-        assertEq(beneficiaryUnitsBefore, totalUnitsBefore, "beneficiary receives delegated units after mint");
-
-        uint256 tokenId = 1_000_000_001;
-        vm.prank(beneficiary);
-        nft.transferFrom(beneficiary, recipient, tokenId);
-
-        uint256 beneficiaryUnitsAfter = nft.getTierAttestationUnitsOf(beneficiary, 1);
-        uint256 recipientUnitsAfter = nft.getTierAttestationUnitsOf(recipient, 1);
-        uint256 totalUnitsAfter = nft.getTierTotalAttestationUnitsOf(1);
-
-        // After the fix: attestation units go to beneficiary on mint, then move to recipient on transfer.
-        // Total units stay constant, beneficiary loses units, recipient gains them.
-        assertEq(totalUnitsAfter, totalUnitsBefore, "total tier units stay constant");
-        assertEq(beneficiaryUnitsAfter, 0, "beneficiary loses attestation units after transferring NFT");
-        assertEq(recipientUnitsAfter, totalUnitsAfter, "recipient receives full attestation units from transfer");
-        // No double-counting: sum of individual units equals total.
-        assertEq(
-            beneficiaryUnitsAfter + recipientUnitsAfter,
-            totalUnitsAfter,
-            "no double-counting: sum of individual units equals total"
-        );
-    }
-
-    function _launchGame() internal returns (uint256 projectId, DefifaHook nft) {
-        DefifaTierParams[] memory tierParams = new DefifaTierParams[](2);
-        for (uint256 i = 0; i < 2; i++) {
-            tierParams[i] = DefifaTierParams({
-                reservedRate: 1001,
-                reservedTokenBeneficiary: address(0),
-                encodedIPFSUri: bytes32(0),
-                shouldUseReservedTokenBeneficiaryAsDefault: false,
-                name: "DEFIFA"
-            });
-        }
-
-        DefifaLaunchProjectData memory d = DefifaLaunchProjectData({
-            name: "DEFIFA",
-            projectUri: "",
-            contractUri: "",
-            baseUri: "",
-            tierPrice: 1 ether,
-            token: JBAccountingContext({token: JBConstants.NATIVE_TOKEN, decimals: 18, currency: JBCurrencyIds.ETH}),
-            mintPeriodDuration: 1 days,
-            start: uint48(block.timestamp + 3 days),
-            refundPeriodDuration: 1 days,
-            store: new JB721TiersHookStore(),
-            splits: new JBSplit[](0),
-            attestationStartTime: 0,
-            attestationGracePeriod: 100_381,
-            defaultAttestationDelegate: address(0),
-            tiers: tierParams,
-            defaultTokenUriResolver: IJB721TokenUriResolver(address(0)),
-            terminal: jbMultiTerminal(),
-            minParticipation: 0,
-            scorecardTimeout: 0,
-            timelockDuration: 0
-        });
-
-        _mintPhaseStart = d.start - d.mintPeriodDuration - d.refundPeriodDuration;
-
-        projectId = deployer.launchGameWith(d);
-
-        JBRuleset memory fc = jbRulesets().currentOf(projectId);
-        if (fc.dataHook() == address(0)) {
-            (fc,) = jbRulesets().latestQueuedOf(projectId);
-        }
-        nft = DefifaHook(fc.dataHook());
-    }
-
-    function _buildPayMetadata(bytes memory metadata) internal view returns (bytes memory) {
-        bytes[] memory data = new bytes[](1);
-        data[0] = metadata;
-        bytes4[] memory ids = new bytes4[](1);
-        ids[0] = metadataHelper().getId("pay", address(hook));
-        return metadataHelper().createMetadata(ids, data);
-    }
-}

package/test/audit/CodexNemesisCurrencyMismatchBypass.t.sol

@@ -1,112 +0,0 @@
-// SPDX-License-Identifier: UNLICENSED
-pragma solidity 0.8.28;
-
-import {DefifaUSDCTest} from "../DefifaUSDC.t.sol";
-import {DefifaLaunchProjectData} from "../../src/structs/DefifaLaunchProjectData.sol";
-import {DefifaTierCashOutWeight} from "../../src/structs/DefifaTierCashOutWeight.sol";
-import {DefifaTierParams} from "../../src/structs/DefifaTierParams.sol";
-import {JB721TiersHookStore} from "@bananapus/721-hook-v6/src/JB721TiersHookStore.sol";
-import {IJB721TokenUriResolver} from "@bananapus/721-hook-v6/src/interfaces/IJB721TokenUriResolver.sol";
-import {JBAccountingContext} from "@bananapus/core-v6/src/structs/JBAccountingContext.sol";
-import {JBConstants} from "@bananapus/core-v6/src/libraries/JBConstants.sol";
-import {JBSplit} from "@bananapus/core-v6/src/structs/JBSplit.sol";
-
-/// @notice Regression test for the currency mismatch fix: ERC-20 games now correctly resolve payout limits via
-/// baseCurrency. Before the fix, using a non-canonical currency (e.g. currency=1 for USDC) caused sendPayoutsOf to use
-/// uint32(uint160(token)) which didn't match the stored payout limit currency, silently skipping payouts.
-/// After the fix, fulfillCommitmentsOf uses metadata.baseCurrency which always matches the stored limit.
-contract CodexNemesisCurrencyMismatchBypassTest is DefifaUSDCTest {
-    /// @notice Verify that an ERC-20 game with non-canonical currency (1) correctly pays out commitment fees.
-    function test_nonCanonicalCurrencyPayoutsNowSucceed() external {
-        uint104 tierPrice = 100e6;
-
-        (_pid, _nft, _gov) = _launch(_launchDataUsdcNonCanonical(tierPrice));
-        _users = new address[](2);
-        _users[0] = _addr(0);
-        _users[1] = _addr(1);
-
-        vm.warp(block.timestamp + 1 days + 1);
-
-        _mintUsdc(_users[0], 1, tierPrice);
-        _mintUsdc(_users[1], 2, tierPrice);
-        _delegateSelf(_users[0], 1);
-        _delegateSelf(_users[1], 2);
-
-        vm.warp(block.timestamp + 2 days);
-
-        DefifaTierCashOutWeight[] memory scorecard = new DefifaTierCashOutWeight[](2);
-        scorecard[0] = DefifaTierCashOutWeight({id: 1, cashOutWeight: _nft.TOTAL_CASHOUT_WEIGHT()});
-        scorecard[1] = DefifaTierCashOutWeight({id: 2, cashOutWeight: 0});
-
-        vm.prank(_users[1]);
-        uint256 scorecardId = _gov.submitScorecardFor(_pid, scorecard);
-
-        vm.prank(_users[1]);
-        _gov.attestToScorecardFrom(_pid, scorecardId);
-
-        vm.warp(block.timestamp + _gov.attestationGracePeriodOf(_pid) + 1);
-
-        uint256 preRatificationBalance = _balance();
-        uint256 expectedFee = (preRatificationBalance * 75_000_000) / JBConstants.SPLITS_TOTAL_PERCENT;
-
-        vm.prank(_users[1]);
-        _gov.ratifyScorecardFrom(_pid, scorecard);
-
-        // After the fix: payout succeeds, fulfilledCommitmentsOf stores the actual fee (not the sentinel).
-        assertEq(
-            deployer.fulfilledCommitmentsOf(_pid), expectedFee, "fulfilled commitments equals the expected fee amount"
-        );
-
-        // The fee has been paid out, reducing the game pot.
-        assertEq(_balance(), preRatificationBalance - expectedFee, "balance decreased by the fee amount");
-
-        // Winner cashes out and receives only the post-fee surplus, not the full pot.
-        uint256 winnerBalBefore = usdc.balanceOf(_users[0]);
-        _cashOutUsdc(_users[0], 1, 1);
-        uint256 winnerReceived = usdc.balanceOf(_users[0]) - winnerBalBefore;
-
-        assertEq(
-            winnerReceived,
-            preRatificationBalance - expectedFee,
-            "winner receives the post-fee surplus, not the full pot"
-        );
-    }
-
-    function _launchDataUsdcNonCanonical(uint104 tierPrice) internal returns (DefifaLaunchProjectData memory) {
-        DefifaTierParams[] memory tp = new DefifaTierParams[](2);
-        for (uint256 i; i < 2; i++) {
-            tp[i] = DefifaTierParams({
-                reservedRate: 1001,
-                reservedTokenBeneficiary: address(0),
-                encodedIPFSUri: bytes32(0),
-                shouldUseReservedTokenBeneficiaryAsDefault: false,
-                name: "DEFIFA"
-            });
-        }
-
-        // Non-canonical currency (1 = ETH currency ID) for a USDC token.
-        // Before the fix, this caused fulfillCommitmentsOf to silently skip payouts.
-        return DefifaLaunchProjectData({
-            name: "DEFIFA_USDC_NONCANONICAL",
-            projectUri: "",
-            contractUri: "",
-            baseUri: "",
-            token: JBAccountingContext({token: address(usdc), decimals: 6, currency: 1}),
-            mintPeriodDuration: 1 days,
-            start: uint48(block.timestamp + 3 days),
-            refundPeriodDuration: 1 days,
-            store: new JB721TiersHookStore(),
-            splits: new JBSplit[](0),
-            attestationStartTime: 0,
-            attestationGracePeriod: 1 days,
-            defaultAttestationDelegate: address(0),
-            tierPrice: tierPrice,
-            tiers: tp,
-            defaultTokenUriResolver: IJB721TokenUriResolver(address(0)),
-            terminal: jbMultiTerminal(),
-            minParticipation: 0,
-            scorecardTimeout: 0,
-            timelockDuration: 0
-        });
-    }
-}

package/test/audit/CodexNemesisNoContestReserveDrain.t.sol

@@ -1,238 +0,0 @@
-// SPDX-License-Identifier: UNLICENSED
-pragma solidity 0.8.28;
-
-import {TestBaseWorkflow} from "@bananapus/core-v6/test/helpers/TestBaseWorkflow.sol";
-import {JBTest} from "@bananapus/core-v6/test/helpers/JBTest.sol";
-
-import {DefifaDeployer} from "../../src/DefifaDeployer.sol";
-import {DefifaGovernor} from "../../src/DefifaGovernor.sol";
-import {DefifaHook} from "../../src/DefifaHook.sol";
-import {DefifaTokenUriResolver} from "../../src/DefifaTokenUriResolver.sol";
-import {DefifaGamePhase} from "../../src/enums/DefifaGamePhase.sol";
-import {DefifaLaunchProjectData} from "../../src/structs/DefifaLaunchProjectData.sol";
-import {DefifaTierParams} from "../../src/structs/DefifaTierParams.sol";
-import {JB721TiersHookStore} from "@bananapus/721-hook-v6/src/JB721TiersHookStore.sol";
-import {JB721TiersMintReservesConfig} from "@bananapus/721-hook-v6/src/structs/JB721TiersMintReservesConfig.sol";
-import {IJB721TokenUriResolver} from "@bananapus/721-hook-v6/src/interfaces/IJB721TokenUriResolver.sol";
-import {JBAddressRegistry} from "@bananapus/address-registry-v6/src/JBAddressRegistry.sol";
-import {JBConstants} from "@bananapus/core-v6/src/libraries/JBConstants.sol";
-import {JBCurrencyIds} from "@bananapus/core-v6/src/libraries/JBCurrencyIds.sol";
-import {JBAccountingContext} from "@bananapus/core-v6/src/structs/JBAccountingContext.sol";
-import {JBTerminalConfig} from "@bananapus/core-v6/src/structs/JBTerminalConfig.sol";
-import {JBRulesetConfig} from "@bananapus/core-v6/src/structs/JBRulesetConfig.sol";
-import {JBRulesetMetadata} from "@bananapus/core-v6/src/structs/JBRulesetMetadata.sol";
-import {JBSplitGroup} from "@bananapus/core-v6/src/structs/JBSplitGroup.sol";
-import {JBFundAccessLimitGroup} from "@bananapus/core-v6/src/structs/JBFundAccessLimitGroup.sol";
-import {JBSplit} from "@bananapus/core-v6/src/structs/JBSplit.sol";
-import {IJBRulesetApprovalHook} from "@bananapus/core-v6/src/interfaces/IJBRulesetApprovalHook.sol";
-import {IERC20} from "@openzeppelin/contracts/token/ERC20/IERC20.sol";
-import {ITypeface} from "lib/typeface/contracts/interfaces/ITypeface.sol";
-
-contract CodexNemesisNoContestReserveDrainTest is JBTest, TestBaseWorkflow {
-    uint256 internal _protocolFeeProjectId;
-    uint256 internal _defifaProjectId;
-
-    DefifaDeployer internal _deployer;
-    DefifaHook internal _hookImpl;
-    DefifaGovernor internal _governorImpl;
-
-    address internal _projectOwner = address(bytes20(keccak256("projectOwner")));
-    address internal _player = address(bytes20(keccak256("player")));
-    address internal _reserveBeneficiary = address(bytes20(keccak256("reserveBeneficiary")));
-
-    function setUp() public virtual override {
-        super.setUp();
-
-        JBAccountingContext[] memory tokens = new JBAccountingContext[](1);
-        tokens[0] = JBAccountingContext({token: JBConstants.NATIVE_TOKEN, decimals: 18, currency: JBCurrencyIds.ETH});
-
-        JBTerminalConfig[] memory terminalConfigs = new JBTerminalConfig[](1);
-        terminalConfigs[0] = JBTerminalConfig({terminal: jbMultiTerminal(), accountingContextsToAccept: tokens});
-
-        JBRulesetConfig[] memory rulesetConfigs = new JBRulesetConfig[](1);
-        rulesetConfigs[0] = JBRulesetConfig({
-            mustStartAtOrAfter: 0,
-            duration: 10 days,
-            weight: 1e18,
-            weightCutPercent: 0,
-            approvalHook: IJBRulesetApprovalHook(address(0)),
-            metadata: JBRulesetMetadata({
-                reservedPercent: 0,
-                cashOutTaxRate: 0,
-                baseCurrency: JBCurrencyIds.ETH,
-                pausePay: false,
-                pauseCreditTransfers: false,
-                allowOwnerMinting: false,
-                allowSetCustomToken: false,
-                allowTerminalMigration: false,
-                allowSetTerminals: false,
-                allowSetController: false,
-                allowAddAccountingContext: false,
-                allowAddPriceFeed: false,
-                ownerMustSendPayouts: false,
-                holdFees: false,
-                useTotalSurplusForCashOuts: false,
-                useDataHookForPay: true,
-                useDataHookForCashOut: true,
-                dataHook: address(0),
-                metadata: 0
-            }),
-            splitGroups: new JBSplitGroup[](0),
-            fundAccessLimitGroups: new JBFundAccessLimitGroup[](0)
-        });
-
-        _protocolFeeProjectId =
-            jbController().launchProjectFor(address(_projectOwner), "", rulesetConfigs, terminalConfigs, "");
-        vm.prank(_projectOwner);
-        address nanaToken =
-            address(jbController().deployERC20For(_protocolFeeProjectId, "Bananapus", "NANA", bytes32(0)));
-
-        _defifaProjectId =
-            jbController().launchProjectFor(address(_projectOwner), "", rulesetConfigs, terminalConfigs, "");
-        vm.prank(_projectOwner);
-        address defifaToken = address(jbController().deployERC20For(_defifaProjectId, "Defifa", "DEFIFA", bytes32(0)));
-
-        _hookImpl = new DefifaHook(jbDirectory(), IERC20(defifaToken), IERC20(nanaToken));
-        _governorImpl = new DefifaGovernor(jbController(), address(this));
-        _deployer = new DefifaDeployer(
-            address(_hookImpl),
-            new DefifaTokenUriResolver(ITypeface(address(0))),
-            _governorImpl,
-            jbController(),
-            new JBAddressRegistry(),
-            _defifaProjectId,
-            _protocolFeeProjectId
-        );
-
-        _hookImpl.transferOwnership(address(_deployer));
-        _governorImpl.transferOwnership(address(_deployer));
-    }
-
-    function test_noContestReserveMintExcludedFromRefund() external {
-        DefifaLaunchProjectData memory data = _launchData();
-        uint256 projectId = _deployer.launchGameWith(data);
-
-        vm.warp(data.start - data.mintPeriodDuration - data.refundPeriodDuration);
-        vm.deal(_player, 1 ether);
-
-        uint16[] memory tierIds = new uint16[](1);
-        tierIds[0] = 1;
-        vm.prank(_player);
-        jbMultiTerminal().pay{value: 1 ether}(
-            projectId,
-            JBConstants.NATIVE_TOKEN,
-            1 ether,
-            _player,
-            0,
-            "",
-            _buildPayMetadata(abi.encode(_player, tierIds))
-        );
-
-        vm.warp(data.start + 1);
-        (, JBRulesetMetadata memory metadata) = jbController().currentRulesetOf(projectId);
-        DefifaHook hook = DefifaHook(metadata.dataHook);
-        assertEq(uint256(_deployer.currentGamePhaseOf(projectId)), uint256(DefifaGamePhase.NO_CONTEST));
-
-        JB721TiersMintReservesConfig[] memory reserveConfigs = new JB721TiersMintReservesConfig[](1);
-        reserveConfigs[0] = JB721TiersMintReservesConfig({tierId: 1, count: 1});
-        hook.mintReservesFor(reserveConfigs);
-
-        assertEq(hook.balanceOf(_reserveBeneficiary), 1, "reserve beneficiary received a free NFT");
-        assertTrue(hook.isReserveMint(_generateTokenId(1, 2)), "token flagged as reserve mint");
-
-        _deployer.triggerNoContestFor(projectId);
-
-        // Build metadata for the reserve token cashout before calling expectRevert.
-        uint256 reserveTokenId = _generateTokenId(1, 2);
-        uint256[] memory reserveTokenIds = new uint256[](1);
-        reserveTokenIds[0] = reserveTokenId;
-        bytes memory reserveCashOutMetadata = _buildCashOutMetadata(reserveTokenIds);
-
-        // The reserve beneficiary's cashout reverts — reserve-minted tokens are excluded from refund calculations.
-        vm.prank(_reserveBeneficiary);
-        vm.expectRevert();
-        jbMultiTerminal()
-            .cashOutTokensOf(
-                _reserveBeneficiary,
-                projectId,
-                0,
-                JBConstants.NATIVE_TOKEN,
-                0,
-                payable(_reserveBeneficiary),
-                reserveCashOutMetadata
-            );
-
-        // The paid player can still get their full refund.
-        uint256 playerTokenId = _generateTokenId(1, 1);
-        uint256 balanceBefore = _player.balance;
-        _cashOut(projectId, _player, playerTokenId);
-
-        // Player gets full refund (1 ether minus fee).
-        assertTrue(_player.balance > balanceBefore, "player received refund");
-        assertEq(hook.balanceOf(_player), 0, "player NFT burned");
-    }
-
-    function _cashOut(uint256 projectId, address holder, uint256 tokenId) internal {
-        uint256[] memory tokenIds = new uint256[](1);
-        tokenIds[0] = tokenId;
-        bytes memory cashOutMetadata = _buildCashOutMetadata(tokenIds);
-
-        vm.prank(holder);
-        jbMultiTerminal()
-            .cashOutTokensOf(holder, projectId, 0, JBConstants.NATIVE_TOKEN, 0, payable(holder), cashOutMetadata);
-    }
-
-    function _launchData() internal returns (DefifaLaunchProjectData memory) {
-        DefifaTierParams[] memory tierParams = new DefifaTierParams[](1);
-        tierParams[0] = DefifaTierParams({
-            reservedRate: 1,
-            reservedTokenBeneficiary: _reserveBeneficiary,
-            encodedIPFSUri: bytes32(0),
-            shouldUseReservedTokenBeneficiaryAsDefault: false,
-            name: "SOLE"
-        });
-
-        return DefifaLaunchProjectData({
-            name: "DEFIFA",
-            projectUri: "",
-            contractUri: "",
-            baseUri: "",
-            tiers: tierParams,
-            tierPrice: 1 ether,
-            token: JBAccountingContext({token: JBConstants.NATIVE_TOKEN, decimals: 18, currency: JBCurrencyIds.ETH}),
-            mintPeriodDuration: 1 days,
-            refundPeriodDuration: 1 days,
-            start: uint48(block.timestamp + 3 days),
-            splits: new JBSplit[](0),
-            attestationStartTime: 0,
-            attestationGracePeriod: 1 days,
-            defaultAttestationDelegate: address(0),
-            defaultTokenUriResolver: IJB721TokenUriResolver(address(0)),
-            terminal: jbMultiTerminal(),
-            store: new JB721TiersHookStore(),
-            minParticipation: 2 ether,
-            scorecardTimeout: 0,
-            timelockDuration: 0
-        });
-    }
-
-    function _buildPayMetadata(bytes memory decodedData) internal view returns (bytes memory) {
-        bytes4[] memory ids = new bytes4[](1);
-        ids[0] = metadataHelper().getId("pay", address(_hookImpl));
-        bytes[] memory datas = new bytes[](1);
-        datas[0] = decodedData;
-        return metadataHelper().createMetadata(ids, datas);
-    }
-
-    function _buildCashOutMetadata(uint256[] memory tokenIds) internal view returns (bytes memory) {
-        bytes4[] memory ids = new bytes4[](1);
-        ids[0] = metadataHelper().getId("cashOut", address(_hookImpl));
-        bytes[] memory datas = new bytes[](1);
-        datas[0] = abi.encode(tokenIds);
-        return metadataHelper().createMetadata(ids, datas);
-    }
-
-    function _generateTokenId(uint256 tierId, uint256 tokenNumber) internal pure returns (uint256) {
-        return (tierId * 1_000_000_000) + tokenNumber;
-    }
-}