harden: freeze PYTH_SOLANA_FEEDS and all SLAB_TIERS_* exports#194
harden: freeze PYTH_SOLANA_FEEDS and all SLAB_TIERS_* exports#1940x-SquidSol wants to merge 1 commit intodcccrypto:mainfrom
Conversation
Exported config objects declared as mutable Records could be mutated at runtime by compromised dependencies: - PYTH_SOLANA_FEEDS: oracle feed poisoning (wrong mint-to-feed map) - SLAB_TIERS_V1M/V1M2/V_ADL/V_SETDEXPOOL/V12_1: corrupt layout detection, wrong slab sizes for market creation Deep-freezes each object and its inner entries after their population loops complete. Follows the IX_TAG freeze precedent (PR dcccrypto#135) and PROGRAM_IDS freeze (PR dcccrypto#189). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
Warning Rate limit exceeded
Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 52 minutes and 35 seconds. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (2)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Summary
PYTH_SOLANA_FEEDS,SLAB_TIERS_V1M,SLAB_TIERS_V1M2,SLAB_TIERS_V_ADL,SLAB_TIERS_V_SETDEXPOOL,SLAB_TIERS_V12_1) were plain mutable RecordsIX_TAG(PR fix(abi): remove redundant IX_TAG mutations, freeze object #135) andPROGRAM_IDS(PR harden: deep-freeze PROGRAM_IDS, STAKE_PROGRAM_IDS, and STAKE_IX #189)Test plan
🤖 Generated with Claude Code