protoscan 0.1.0

package/src/registry/maker.ts

@@ -0,0 +1,176 @@
+import { parseAbi } from 'viem';
+import type { ProtocolDef } from './schema.js';
+
+const vatAbi = parseAbi([
+  'function Line() view returns (uint256)',
+  'function live() view returns (uint256)',
+  'function debt() view returns (uint256)',
+]);
+
+const jugAbi = parseAbi([
+  'function base() view returns (uint256)',
+]);
+
+const potAbi = parseAbi([
+  'function dsr() view returns (uint256)',
+  'function chi() view returns (uint256)',
+  'function Pie() view returns (uint256)',
+]);
+
+const dogAbi = parseAbi([
+  'function live() view returns (uint256)',
+  'function Hole() view returns (uint256)',
+  'function Dirt() view returns (uint256)',
+]);
+
+const pauseAbi = parseAbi([
+  'function owner() view returns (address)',
+  'function authority() view returns (address)',
+  'function delay() view returns (uint256)',
+]);
+
+const ownerAbi = parseAbi([
+  'function owner() view returns (address)',
+]);
+
+export const maker: ProtocolDef = {
+  id: 'maker',
+  name: 'Maker (Sky)',
+  version: 'MCD',
+  website: 'https://makerdao.com',
+  description: 'Multi-collateral DAI stablecoin system',
+
+  contracts: {
+    MCD_VAT: { name: 'Vat', role: 'Core vault engine — tracks all debt and collateral', type: 'raw' },
+    MCD_JUG: { name: 'Jug', role: 'Stability fee accumulator', type: 'raw' },
+    MCD_POT: { name: 'Pot', role: 'DAI Savings Rate module', type: 'raw' },
+    MCD_DOG: { name: 'Dog', role: 'Liquidation engine', type: 'raw' },
+    MCD_SPOT: { name: 'Spotter', role: 'Oracle and liquidation ratio manager', type: 'raw' },
+    MCD_PAUSE: { name: 'DSPause', role: 'Governance timelock', type: 'raw' },
+    MCD_ADM: { name: 'DSChief', role: 'Governance voting contract', type: 'raw' },
+  },
+
+  deployments: {
+    ethereum: {
+      MCD_VAT: '0x35D1b3F3D7966A1DFe207aa4514C12a259A0492B',
+      MCD_JUG: '0x19c0976f590D67707E62397C87829d896Dc0f1F1',
+      MCD_POT: '0x197E90f9FAD81970bA7976f33CbD77088E5D7cf7',
+      MCD_DOG: '0x135954d155898D42C90D2a57824C690e0c7BEf1B',
+      MCD_SPOT: '0x65C79fcB50Ca1594B025960e539eD7A9a6D434A3',
+      MCD_PAUSE: '0xbE286431454714F511008713973d3B053A2d38f3',
+      MCD_ADM: '0x0a3f6849f78076aefaDf113F5BED87720274dDC0',
+    },
+  },
+
+  params: [
+    {
+      name: 'globalDebtCeiling',
+      description: 'Global debt ceiling (Line) — max DAI that can be minted',
+      contract: 'MCD_VAT',
+      functionName: 'Line',
+      abi: vatAbi,
+      decode: 'ray',
+      category: 'risk',
+      severity: 'critical',
+    },
+    {
+      name: 'totalDebt',
+      description: 'Total system debt',
+      contract: 'MCD_VAT',
+      functionName: 'debt',
+      abi: vatAbi,
+      decode: 'ray',
+      category: 'state',
+      severity: 'info',
+    },
+    {
+      name: 'vatLive',
+      description: 'Vat live status (1=live, 0=caged/emergency shutdown)',
+      contract: 'MCD_VAT',
+      functionName: 'live',
+      abi: vatAbi,
+      decode: 'uint',
+      category: 'state',
+      severity: 'critical',
+    },
+    {
+      name: 'baseRate',
+      description: 'Base stability fee rate applied to all vaults',
+      contract: 'MCD_JUG',
+      functionName: 'base',
+      abi: jugAbi,
+      decode: 'ray',
+      category: 'rate',
+      severity: 'warning',
+    },
+    {
+      name: 'dsr',
+      description: 'DAI Savings Rate — per-second accumulation rate',
+      contract: 'MCD_POT',
+      functionName: 'dsr',
+      abi: potAbi,
+      decode: 'ray',
+      category: 'rate',
+      severity: 'warning',
+    },
+    {
+      name: 'dsrTotalDeposits',
+      description: 'Total DAI deposited in DSR (Pie)',
+      contract: 'MCD_POT',
+      functionName: 'Pie',
+      abi: potAbi,
+      decode: 'wad',
+      category: 'state',
+      severity: 'info',
+    },
+    {
+      name: 'dogLive',
+      description: 'Liquidation engine live status',
+      contract: 'MCD_DOG',
+      functionName: 'live',
+      abi: dogAbi,
+      decode: 'uint',
+      category: 'state',
+      severity: 'critical',
+    },
+    {
+      name: 'globalLiquidationLimit',
+      description: 'Max DAI needed to cover all active auctions (Hole)',
+      contract: 'MCD_DOG',
+      functionName: 'Hole',
+      abi: dogAbi,
+      decode: 'ray',
+      category: 'risk',
+      severity: 'warning',
+    },
+    {
+      name: 'timelockDelay',
+      description: 'Governance timelock delay in seconds',
+      contract: 'MCD_PAUSE',
+      functionName: 'delay',
+      abi: pauseAbi,
+      decode: 'uint',
+      category: 'config',
+      severity: 'critical',
+    },
+  ],
+
+  access: [
+    {
+      role: 'Pause Owner',
+      description: 'Owner of governance timelock — can schedule spells',
+      contract: 'MCD_PAUSE',
+      functionName: 'owner',
+      abi: pauseAbi,
+      severity: 'critical',
+    },
+    {
+      role: 'Pause Authority',
+      description: 'Authority contract — typically DSChief governance',
+      contract: 'MCD_PAUSE',
+      functionName: 'authority',
+      abi: pauseAbi,
+      severity: 'critical',
+    },
+  ],
+};

package/src/registry/morpho-blue.ts

@@ -0,0 +1,347 @@
+import { parseAbi } from 'viem';
+import type { ProtocolDef } from './schema.js';
+
+const morphoAbi = parseAbi([
+  'function owner() view returns (address)',
+  'function feeRecipient() view returns (address)',
+  'function isIrmEnabled(address irm) view returns (bool)',
+  'function isLltvEnabled(uint256 lltv) view returns (bool)',
+  'function isAuthorized(address authorizer, address authorized) view returns (bool)',
+  'function nonce(address authorizer) view returns (uint256)',
+  'function market(bytes32 id) view returns ((uint128 totalSupplyAssets, uint128 totalSupplyShares, uint128 totalBorrowAssets, uint128 totalBorrowShares, uint128 lastUpdate, uint128 fee))',
+  'function idToMarketParams(bytes32 id) view returns ((address loanToken, address collateralToken, address oracle, address irm, uint256 lltv))',
+  'function position(bytes32 id, address user) view returns ((uint256 supplyShares, uint128 borrowShares, uint128 collateral))',
+  'function DOMAIN_SEPARATOR() view returns (bytes32)',
+]);
+
+const irmAbi = parseAbi([
+  'function MORPHO() view returns (address)',
+  'function rateAtTarget(bytes32 id) view returns (int256)',
+]);
+
+const metaMorphoFactoryAbi = parseAbi([
+  'function isMetaMorpho(address target) view returns (bool)',
+]);
+
+const publicAllocatorAbi = parseAbi([
+  'function admin(address vault) view returns (address)',
+  'function fee(address vault) view returns (uint256)',
+  'function accruedFee(address vault) view returns (uint256)',
+]);
+
+const chainlinkOracleFactoryAbi = parseAbi([
+  'function isMorphoChainlinkOracleV2(address target) view returns (bool)',
+]);
+
+// MetaMorpho vault ABI (ERC-4626 + Morpho curation layer).
+// Every vault is a permissionless instance deployed by MetaMorphoFactory /
+// MetaMorphoFactoryV1_1 — there is no single canonical vault. FlagshipUsdcVault
+// below (Steakhouse USDC) is tracked as a representative, high-TVL example.
+const vaultAbi = parseAbi([
+  'function owner() view returns (address)',
+  'function curator() view returns (address)',
+  'function guardian() view returns (address)',
+  'function isAllocator(address target) view returns (bool)',
+  'function timelock() view returns (uint256)',
+  'function fee() view returns (uint96)',
+  'function feeRecipient() view returns (address)',
+  'function skimRecipient() view returns (address)',
+  'function asset() view returns (address)',
+  'function totalAssets() view returns (uint256)',
+  'function supplyQueueLength() view returns (uint256)',
+  'function withdrawQueueLength() view returns (uint256)',
+  'function config(bytes32 id) view returns ((uint184 cap, bool enabled, uint64 removableAt))',
+  'function DECIMALS_OFFSET() view returns (uint8)',
+  'function MORPHO() view returns (address)',
+]);
+
+export const morphoBlue: ProtocolDef = {
+  id: 'morpho-blue',
+  name: 'Morpho Blue',
+  version: '1.0',
+  website: 'https://morpho.org',
+  description: 'Immutable, oracle-agnostic isolated lending primitive with a permissionless MetaMorpho vault curation layer',
+
+  contracts: {
+    Morpho: { name: 'Morpho', role: 'Core immutable lending singleton — isolated markets, no upgradeability', type: 'raw' },
+    AdaptiveCurveIrm: { name: 'AdaptiveCurveIrm', role: 'Default interest rate model targeting ~90% utilization', type: 'raw' },
+    MetaMorphoFactory: { name: 'MetaMorpho Factory (v1.0)', role: 'Original factory deploying MetaMorpho vault instances', type: 'raw' },
+    MetaMorphoFactoryV1_1: { name: 'MetaMorpho Factory v1.1', role: 'Current factory deploying MetaMorphoV1_1 vault instances', type: 'raw' },
+    PublicAllocator: { name: 'Public Allocator', role: 'Permissionless reallocation of vault liquidity within curator-set flow caps', type: 'raw' },
+    ChainlinkOracleFactory: { name: 'MorphoChainlinkOracleV2 Factory', role: 'Deploys Chainlink-backed market oracle adaptors', type: 'raw' },
+    BundlerV2: { name: 'Bundler V2', role: 'Multicall router for atomic supply/borrow/flashloan bundles', type: 'raw' },
+    Bundler3: { name: 'Bundler3', role: 'Successor multicall router with generalized adapters', type: 'raw' },
+    FlagshipUsdcVault: { name: 'Steakhouse USDC Vault', role: 'Representative MetaMorpho vault instance (flagship USDC market)', type: 'raw' },
+  },
+
+  deployments: {
+    ethereum: {
+      Morpho: '0xBBBBBbbBBb9cC5e90e3b3Af64bdAF62C37EEFFCb',
+      AdaptiveCurveIrm: '0x870aC11D48B15DB9a138Cf899d20F13F79Ba00BC',
+      MetaMorphoFactory: '0xA9c3D3a366466Fa809d1Ae982Fb2c46E5fC41101',
+      MetaMorphoFactoryV1_1: '0x1897A8997241C1cD4bD0698647e4EB7213535c24',
+      PublicAllocator: '0xfd32fA2ca22c76dD6E550706Ad913FC6CE91c75D',
+      ChainlinkOracleFactory: '0x3A7bB36Ee3f3eE32A60e9f2b33c1e5f2E83ad766',
+      BundlerV2: '0x4095F064B8d3c3548A3bebfd0Bbfd04750E30077',
+      Bundler3: '0x6566194141eefa99Af43Bb5Aa71460Ca2Dc90245',
+      FlagshipUsdcVault: '0xBEEF01735c132Ada46AA9aA4c54623cAA92A64CB',
+    },
+    base: {
+      Morpho: '0xBBBBBbbBBb9cC5e90e3b3Af64bdAF62C37EEFFCb',
+      AdaptiveCurveIrm: '0x46415998764C29aB2a25CbeA6254146D50D22687',
+      MetaMorphoFactoryV1_1: '0xFf62A7c278C62eD665133147129245053Bbf5918',
+      PublicAllocator: '0xA090dD1a701408Df1d4d0B85b716c87565f90467',
+      ChainlinkOracleFactory: '0x2DC205F24BCb6B311E5cdf0745B0741648Aebd3d',
+      BundlerV2: '0x23055618898e202386e6c13955a58D3C68200BFB',
+      Bundler3: '0x6BFd8137e702540E7A42B74178A4a49Ba43920C4',
+      FlagshipUsdcVault: '0xCBeeF01994E24a60f7DCB8De98e75AD8BD4Ad60d',
+    },
+  },
+
+  params: [
+    {
+      name: 'morphoOwner',
+      description: 'Morpho core owner — can enable new IRMs/LLTVs and set the fee recipient, but cannot touch existing market params (immutable by design)',
+      contract: 'Morpho',
+      functionName: 'owner',
+      abi: morphoAbi,
+      decode: 'address',
+      category: 'access',
+      severity: 'critical',
+    },
+    {
+      name: 'morphoFeeRecipient',
+      description: 'Recipient of protocol fees accrued across all markets',
+      contract: 'Morpho',
+      functionName: 'feeRecipient',
+      abi: morphoAbi,
+      decode: 'address',
+      category: 'config',
+      severity: 'warning',
+    },
+    {
+      name: 'adaptiveCurveIrmEnabled',
+      description: 'Whether AdaptiveCurveIrm is whitelisted as an approved IRM on Ethereum mainnet',
+      contract: 'Morpho',
+      functionName: 'isIrmEnabled',
+      args: ['0x870aC11D48B15DB9a138Cf899d20F13F79Ba00BC'],
+      abi: morphoAbi,
+      decode: 'bool',
+      category: 'config',
+      severity: 'info',
+    },
+    {
+      name: 'lltv86PercentEnabled',
+      description: 'Whether the 86% LLTV tier is whitelisted (one of the standard risk tiers)',
+      contract: 'Morpho',
+      functionName: 'isLltvEnabled',
+      args: [860000000000000000n],
+      abi: morphoAbi,
+      decode: 'bool',
+      category: 'risk',
+      severity: 'info',
+    },
+    {
+      name: 'irmMorphoRef',
+      description: 'Morpho core address the AdaptiveCurveIrm is bound to — must match the deployed Morpho singleton',
+      contract: 'AdaptiveCurveIrm',
+      functionName: 'MORPHO',
+      abi: irmAbi,
+      decode: 'address',
+      category: 'config',
+      severity: 'info',
+    },
+    {
+      name: 'factoryRecognizesFlagshipVault',
+      description: 'Confirms the flagship USDC vault (deployed pre-v1.1) was created by the original MetaMorphoFactory — sanity check against spoofed vault UIs',
+      contract: 'MetaMorphoFactory',
+      functionName: 'isMetaMorpho',
+      args: ['0xBEEF01735c132Ada46AA9aA4c54623cAA92A64CB'],
+      abi: metaMorphoFactoryAbi,
+      decode: 'bool',
+      category: 'config',
+      severity: 'info',
+    },
+    {
+      name: 'cbbtcUsdcOracleIsFactoryDeployed',
+      description: 'Confirms the oracle used by the flagship vault\'s first supply-queue market (cbBTC/USDC, 86% LLTV) was deployed by the canonical MorphoChainlinkOracleV2Factory — sanity check against a spoofed/malicious oracle',
+      contract: 'ChainlinkOracleFactory',
+      functionName: 'isMorphoChainlinkOracleV2',
+      args: ['0xA6D6950c9F177F1De7f7757FB33539e3Ec60182a'],
+      abi: chainlinkOracleFactoryAbi,
+      decode: 'bool',
+      category: 'risk',
+      severity: 'info',
+    },
+    {
+      name: 'publicAllocatorAdmin',
+      description: 'Address allowed to set flow caps for the flagship vault on the Public Allocator — can trigger instant reallocation within curator-approved caps',
+      contract: 'PublicAllocator',
+      functionName: 'admin',
+      args: ['0xBEEF01735c132Ada46AA9aA4c54623cAA92A64CB'],
+      abi: publicAllocatorAbi,
+      decode: 'address',
+      category: 'access',
+      severity: 'warning',
+    },
+    {
+      name: 'publicAllocatorFee',
+      description: 'Fee (wei) charged by the Public Allocator for reallocating the flagship vault',
+      contract: 'PublicAllocator',
+      functionName: 'fee',
+      args: ['0xBEEF01735c132Ada46AA9aA4c54623cAA92A64CB'],
+      abi: publicAllocatorAbi,
+      decode: 'uint',
+      category: 'config',
+      severity: 'info',
+    },
+    {
+      name: 'vaultOwner',
+      description: 'Vault owner — can set curator, guardian, timelock and allocators; ultimate control over vault configuration',
+      contract: 'FlagshipUsdcVault',
+      functionName: 'owner',
+      abi: vaultAbi,
+      decode: 'address',
+      category: 'access',
+      severity: 'critical',
+    },
+    {
+      name: 'vaultCurator',
+      description: 'Curator — whitelists markets and sets/lowers supply caps for the vault',
+      contract: 'FlagshipUsdcVault',
+      functionName: 'curator',
+      abi: vaultAbi,
+      decode: 'address',
+      category: 'access',
+      severity: 'critical',
+    },
+    {
+      name: 'vaultGuardian',
+      description: 'Guardian — can revoke pending timelocked changes (cap increases, guardian/timelock changes, market removals)',
+      contract: 'FlagshipUsdcVault',
+      functionName: 'guardian',
+      abi: vaultAbi,
+      decode: 'address',
+      category: 'access',
+      severity: 'critical',
+    },
+    {
+      name: 'vaultTimelock',
+      description: 'Timelock delay (seconds) applied to risk-sensitive vault changes',
+      contract: 'FlagshipUsdcVault',
+      functionName: 'timelock',
+      abi: vaultAbi,
+      decode: 'uint',
+      category: 'config',
+      severity: 'warning',
+    },
+    {
+      name: 'vaultFee',
+      description: 'Performance fee taken from vault yield (WAD-scaled fraction)',
+      contract: 'FlagshipUsdcVault',
+      functionName: 'fee',
+      abi: vaultAbi,
+      decode: 'wad',
+      category: 'config',
+      severity: 'warning',
+    },
+    {
+      name: 'vaultFeeRecipient',
+      description: 'Recipient of the vault performance fee',
+      contract: 'FlagshipUsdcVault',
+      functionName: 'feeRecipient',
+      abi: vaultAbi,
+      decode: 'address',
+      category: 'config',
+      severity: 'warning',
+    },
+    {
+      name: 'vaultSkimRecipient',
+      description: 'Receives non-asset token dust skimmed from the vault',
+      contract: 'FlagshipUsdcVault',
+      functionName: 'skimRecipient',
+      abi: vaultAbi,
+      decode: 'address',
+      category: 'config',
+      severity: 'info',
+    },
+    {
+      name: 'vaultAsset',
+      description: 'Underlying ERC-4626 asset held by the vault',
+      contract: 'FlagshipUsdcVault',
+      functionName: 'asset',
+      abi: vaultAbi,
+      decode: 'address',
+      category: 'config',
+      severity: 'info',
+    },
+    {
+      name: 'vaultTotalAssets',
+      description: 'Total assets under management in the vault',
+      contract: 'FlagshipUsdcVault',
+      functionName: 'totalAssets',
+      abi: vaultAbi,
+      decode: 'uint',
+      category: 'state',
+      severity: 'info',
+    },
+    {
+      name: 'vaultSupplyQueueLength',
+      description: 'Number of markets in the vault supply queue',
+      contract: 'FlagshipUsdcVault',
+      functionName: 'supplyQueueLength',
+      abi: vaultAbi,
+      decode: 'uint',
+      category: 'state',
+      severity: 'info',
+    },
+    {
+      name: 'vaultWithdrawQueueLength',
+      description: 'Number of markets in the vault withdraw queue',
+      contract: 'FlagshipUsdcVault',
+      functionName: 'withdrawQueueLength',
+      abi: vaultAbi,
+      decode: 'uint',
+      category: 'state',
+      severity: 'info',
+    },
+  ],
+
+  access: [
+    {
+      role: 'Morpho Core Owner',
+      description: 'Can enable new IRMs/LLTVs and change the fee recipient. Cannot alter existing market params or seize funds — Morpho Blue markets are immutable once created',
+      contract: 'Morpho',
+      functionName: 'owner',
+      abi: morphoAbi,
+      severity: 'critical',
+    },
+    {
+      role: 'Vault Owner',
+      description: 'Full control over a MetaMorpho vault — sets curator, guardian, timelock, allocators, fee recipient',
+      contract: 'FlagshipUsdcVault',
+      functionName: 'owner',
+      abi: vaultAbi,
+      severity: 'critical',
+    },
+    {
+      role: 'Vault Curator',
+      description: 'Decides which markets the vault can allocate to and the supply cap per market — primary risk-management role',
+      contract: 'FlagshipUsdcVault',
+      functionName: 'curator',
+      abi: vaultAbi,
+      severity: 'critical',
+    },
+    {
+      role: 'Vault Guardian',
+      description: 'Can revoke pending timelocked changes (malicious cap increases, curator/guardian/timelock swaps) before they execute',
+      contract: 'FlagshipUsdcVault',
+      functionName: 'guardian',
+      abi: vaultAbi,
+      severity: 'critical',
+    },
+    // Note: Public Allocator's admin/fee are per-vault (take an `address vault`
+    // argument), so they're only tracked as `params` (which support `args`) —
+    // `access` entries are always read with zero arguments by the scanner.
+  ],
+};

package/src/registry/pendle.ts

@@ -0,0 +1,120 @@
+import { parseAbi } from 'viem';
+import type { ProtocolDef } from './schema.js';
+
+const marketFactoryAbi = parseAbi([
+  'function owner() view returns (address)',
+  'function pendingOwner() view returns (address)',
+  'function treasury() view returns (address)',
+  'function reserveFeePercent() view returns (uint256)',
+  'function vePendle() view returns (address)',
+  'function interestFeeRate() view returns (uint256)',
+]);
+
+const vePendleAbi = parseAbi([
+  'function totalSupplyStored() view returns (uint128)',
+  'function lastSlopeChangeAppliedAt() view returns (uint128)',
+  'function pendle() view returns (address)',
+]);
+
+const routerAbi = parseAbi([
+  'function owner() view returns (address)',
+]);
+
+export const pendle: ProtocolDef = {
+  id: 'pendle',
+  name: 'Pendle',
+  version: '2.0',
+  website: 'https://pendle.finance',
+  description: 'Yield trading protocol — tokenize and trade future yield',
+
+  contracts: {
+    PendleMarketFactory: { name: 'MarketFactory', role: 'Creates PT/YT markets', type: 'raw' },
+    vePENDLE: { name: 'vePENDLE', role: 'Vote-escrowed PENDLE for governance', type: 'raw' },
+    PendleRouter: { name: 'Router', role: 'Main swap/liquidity router', type: 'raw' },
+  },
+
+  deployments: {
+    ethereum: {
+      PendleMarketFactory: '0x1A6fCc85557BC4fB7B534ed835a03EF056c22E23',
+      vePENDLE: '0x4f30A9D41B80ecC5B94306AB4364951AE3170210',
+      PendleRouter: '0x888888888889758F76e7103c6CbF23ABbF58F946',
+    },
+    arbitrum: {
+      PendleMarketFactory: '0x2FCb47B58350cD377f94d3a40c938fB1CF7e5Dd5',
+      vePENDLE: '0x3209E9412cca80B18338f2a56ADA59c484c39644',
+      PendleRouter: '0x888888888889758F76e7103c6CbF23ABbF58F946',
+    },
+  },
+
+  params: [
+    {
+      name: 'treasury',
+      description: 'Protocol treasury address — receives fees',
+      contract: 'PendleMarketFactory',
+      functionName: 'treasury',
+      abi: marketFactoryAbi,
+      decode: 'address',
+      category: 'config',
+      severity: 'critical',
+    },
+    {
+      name: 'reserveFeePercent',
+      description: 'Fee percentage taken from yield as protocol revenue',
+      contract: 'PendleMarketFactory',
+      functionName: 'reserveFeePercent',
+      abi: marketFactoryAbi,
+      decode: 'uint',
+      category: 'config',
+      severity: 'warning',
+    },
+    {
+      name: 'interestFeeRate',
+      description: 'Interest fee rate applied to markets',
+      contract: 'PendleMarketFactory',
+      functionName: 'interestFeeRate',
+      abi: marketFactoryAbi,
+      decode: 'uint',
+      category: 'rate',
+      severity: 'warning',
+    },
+    {
+      name: 'vePendleTotalSupply',
+      description: 'Total vePENDLE supply (governance power)',
+      contract: 'vePENDLE',
+      functionName: 'totalSupplyStored',
+      abi: vePendleAbi,
+      decode: 'wad',
+      category: 'state',
+      severity: 'info',
+    },
+    {
+      name: 'pendingOwner',
+      description: 'Pending ownership transfer target',
+      contract: 'PendleMarketFactory',
+      functionName: 'pendingOwner',
+      abi: marketFactoryAbi,
+      decode: 'address',
+      category: 'access',
+      severity: 'critical',
+    },
+  ],
+
+  access: [
+    {
+      role: 'MarketFactory Owner',
+      description: 'Can create markets, set fees, set treasury',
+      contract: 'PendleMarketFactory',
+      functionName: 'owner',
+      abi: marketFactoryAbi,
+      severity: 'critical',
+    },
+    {
+      role: 'Router Owner',
+      description: 'Can update router configuration',
+      contract: 'PendleRouter',
+      functionName: 'owner',
+      abi: routerAbi,
+      severity: 'critical',
+    },
+  ],
+};

package/src/registry/schema.ts

@@ -0,0 +1,40 @@
+import type { Address, Abi } from 'viem';
+
+export interface ParamDef {
+  name: string;
+  description: string;
+  contract: string;
+  functionName: string;
+  abi: Abi;
+  args?: any[];
+  decode?: 'percent' | 'bps' | 'ray' | 'wad' | 'address' | 'bool' | 'uint' | 'string';
+  category: 'risk' | 'rate' | 'access' | 'config' | 'state';
+  severity: 'critical' | 'warning' | 'info';
+}
+
+export interface ContractDef {
+  name: string;
+  role: string;
+  type: 'proxy' | 'raw' | 'multisig';
+}
+
+export interface AccessDef {
+  role: string;
+  description: string;
+  contract: string;
+  functionName: string;
+  abi: Abi;
+  severity: 'critical' | 'warning';
+}
+
+export interface ProtocolDef {
+  id: string;
+  name: string;
+  version: string;
+  website: string;
+  description: string;
+  contracts: Record<string, ContractDef>;
+  deployments: Record<string, Record<string, Address>>;
+  params: ParamDef[];
+  access: AccessDef[];
+}