Harden lock against unsupported assets #13

Merged

backmeupplz merged 3 commits from bdt-kaneo-14-harden-lock-assets into main

2026-05-25 20:19:45 +00:00

backmeupplz commented

2026-05-25 20:07:47 +00:00

(Migrated from github.com)

Summary

add explicit UnsupportedAsset rejection for ETH sends and value-bearing lock calls
add focused tests for plain ETH sends, calldata-with-value lock attempts, and wrong-token approvals leaving accounting unchanged
document the ERC-20 direct-transfer limitation and that no rescue/sweep function was added

Validation

forge fmt --check
forge test
git diff --check

Manual QA: not required; this is contract-only hardening covered by Solidity tests.

## Summary - add explicit UnsupportedAsset rejection for ETH sends and value-bearing lock calls - add focused tests for plain ETH sends, calldata-with-value lock attempts, and wrong-token approvals leaving accounting unchanged - document the ERC-20 direct-transfer limitation and that no rescue/sweep function was added ## Validation - forge fmt --check - forge test - git diff --check Manual QA: not required; this is contract-only hardening covered by Solidity tests.