Skip to content

Conversation

@viktorking7
Copy link

Description

Prevents stranded assets when totalSupply == 0 by sweeping any residual underlying tokens to the current receiver on the last withdraw, and reflecting the swept amount in the Withdraw event.

Direct donations or rounding can leave non-zero totalAssets with zero shares, causing future deposits to mint 0 shares and making assets effectively stuck.

@viktorking7 viktorking7 requested a review from a team as a code owner November 11, 2025 13:35
@changeset-bot
Copy link

changeset-bot bot commented Nov 11, 2025

⚠️ No Changeset found

Latest commit: 2d1ce22

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@coderabbitai
Copy link
Contributor

coderabbitai bot commented Nov 11, 2025

Walkthrough

The ERC4626 contract's _withdraw method was modified to handle residual asset balances. After burning shares and transferring assets, the implementation now sweeps any remaining asset balance to the receiver when the vault is emptied (when totalSupply() equals zero). The total amount swept is added to withdrawnAssets, and the Withdraw event emission was updated to report withdrawnAssets instead of the original assets parameter to accurately reflect the total amount transferred, including swept residuals. The deposit path remains unchanged.

Possibly related PRs

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately and concisely describes the main change: sweeping residual assets on final withdraw to prevent stranded funds in ERC4626, which directly matches the implementation in the changeset.
Description check ✅ Passed The description clearly explains the problem (stranded assets when totalSupply == 0), the solution (sweeping residual tokens), and the motivation (direct donations or rounding), all directly related to the changeset.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 6308fdc and 2d1ce22.

📒 Files selected for processing (1)
  • contracts/token/ERC20/extensions/ERC4626.sol (1 hunks)
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (9)
  • GitHub Check: Redirect rules - solidity-contracts
  • GitHub Check: Header rules - solidity-contracts
  • GitHub Check: Pages changed - solidity-contracts
  • GitHub Check: tests-upgradeable
  • GitHub Check: coverage
  • GitHub Check: tests-foundry
  • GitHub Check: slither
  • GitHub Check: tests
  • GitHub Check: halmos
🔇 Additional comments (1)
contracts/token/ERC20/extensions/ERC4626.sol (1)

298-308: Great dust-sweep addition

Sweeping the leftover balance once the last shares are burned cleanly fixes the stranded-asset edge case without widening the reentrancy surface, and updating the event to report the actual amount withdrawn keeps downstream accounting intact. Nicely done.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant