@venusprotocol/liquidity-hub 2.1.0-dev.1 → 2.1.0-dev.3

package/contracts/Hub/Hub.sol

@@ -26,6 +26,8 @@ import { HubAdminLib } from "./lib/HubAdminLib.sol";
  *      Inheritance order is load-bearing for upgrade safety — do not reorder.
  *      Function ordering follows the Solidity style guide: external → public → internal →
  *      private, mutating before view within each group.
+ *      {HubAdminLib} is linked for EIP-170 headroom; a library declares no state, so it cannot shift this layout.
+ * @custom:oz-upgrades-unsafe-allow external-library-linking
  */
 contract Hub is ERC4626Upgradeable, AccessControlledV8, ReentrancyGuardUpgradeable, HubStorage, IHub {
     using SafeERC20Upgradeable for IERC20Upgradeable;

package/contracts/YieldGroup/YieldGroupCentrifuge.sol

@@ -120,6 +120,7 @@ contract YieldGroupCentrifuge is YieldGroupBase, NavGuard, IYieldGroupCentrifuge
     /// @inheritdoc IYieldGroupCentrifuge
     /// @dev Allowed while the resource is paused as a wind-down action. Cancelling a redeem request
     ///      is asynchronous and may block another redeem request until Centrifuge settles the cancellation.
+    /// @custom:oz-upgrades-unsafe-allow-reachable delegatecall
     function requestRedeem(address resource, uint256 shares) external override nonReentrant {
         _checkAccessAllowed("requestRedeem(address,uint256)");
         if (shares == 0) revert ZeroShares();
@@ -129,6 +130,7 @@ contract YieldGroupCentrifuge is YieldGroupBase, NavGuard, IYieldGroupCentrifuge
     }
 
     /// @inheritdoc IYieldGroupCentrifuge
+    /// @custom:oz-upgrades-unsafe-allow-reachable delegatecall
     function cancelDepositRequest(address resource) external override nonReentrant {
         _checkAccessAllowed("cancelDepositRequest(address)");
         address adapter = _requireRegistered(resource);
@@ -137,6 +139,7 @@ contract YieldGroupCentrifuge is YieldGroupBase, NavGuard, IYieldGroupCentrifuge
     }
 
     /// @inheritdoc IYieldGroupCentrifuge
+    /// @custom:oz-upgrades-unsafe-allow-reachable delegatecall
     function cancelRedeemRequest(address resource) external override nonReentrant {
         _checkAccessAllowed("cancelRedeemRequest(address)");
         address adapter = _requireRegistered(resource);
@@ -381,6 +384,7 @@ contract YieldGroupCentrifuge is YieldGroupBase, NavGuard, IYieldGroupCentrifuge
     ///      The band already counted this deposit at {_dispatchDeposit}, while it was still pending.
     ///      Settling it and claiming it only move it between buckets at the same value, so recording
     ///      it again here would count the same assets twice.
+    /// @custom:oz-upgrades-unsafe-allow-reachable delegatecall
     function _claimDeposit(address resource, address adapter) private returns (uint256 shares) {
         bytes memory ret = adapter.functionDelegateCall(abi.encodeCall(IAdapterCentrifuge.claimDeposit, (resource)));
         shares = abi.decode(ret, (uint256));
@@ -390,6 +394,7 @@ contract YieldGroupCentrifuge is YieldGroupBase, NavGuard, IYieldGroupCentrifuge
     /// @dev Runs an asset-delivering claim and returns what actually landed on this contract's
     ///      balance. The adapter's own return value is skipped: it is the counter Centrifuge said
     ///      it would pay out, and the band and the events have to carry what arrived.
+    /// @custom:oz-upgrades-unsafe-allow-reachable delegatecall
     function _claimMeasuredAssets(address adapter, bytes memory data) private returns (uint256 assets) {
         IERC20 assetToken = IERC20(_assetToken);
         uint256 before = assetToken.balanceOf(address(this));
@@ -427,6 +432,7 @@ contract YieldGroupCentrifuge is YieldGroupBase, NavGuard, IYieldGroupCentrifuge
     ///      shares from the group's balance into `pendingRedeemRequest`, both inside this resource.
     ///      Undoing the request therefore has nothing to undo. What moves the band is the CLAIM, in
     ///      {_claimRedeem}, since that is where assets actually leave the resource.
+    /// @custom:oz-upgrades-unsafe-allow-reachable delegatecall
     function _claimCancelRedeem(address resource, address adapter) private returns (uint256 shares) {
         bytes memory ret =
             adapter.functionDelegateCall(abi.encodeCall(IAdapterCentrifuge.claimCancelRedeem, (resource)));

package/contracts/YieldGroup/base/YieldGroupBase.sol

@@ -624,6 +624,7 @@ abstract contract YieldGroupBase is ReentrancyGuardUpgradeable, YieldGroupBaseSt
     // solhint-disable-next-line no-empty-blocks
     function _onResourceRemoved(address resource) internal virtual { }
 
+    /// @custom:oz-upgrades-unsafe-allow-reachable delegatecall
     function _dispatchDeposit(address adapter, address resource, uint256 amount) internal virtual {
         adapter.functionDelegateCall(abi.encodeCall(IResourceAdapter.deposit, (resource, amount)));
         emit DepositRouted(resource, amount);
@@ -647,6 +648,7 @@ abstract contract YieldGroupBase is ReentrancyGuardUpgradeable, YieldGroupBaseSt
      * @param amount Underlying units to deliver to `to` (exact).
      * @param to Recipient of the underlying.
      * @return received Underlying units actually delivered to `to`, measured by balance delta.
+     * @custom:oz-upgrades-unsafe-allow-reachable delegatecall
      */
     function _dispatchWithdraw(address adapter, address resource, uint256 amount, address to)
         internal