zeekayandHanzo Dev 84587ddb0f Resolve the market before a swap can name a halt ...

SettleSwap took the caller's PoolKey and never asked whether that pool
existed, so key.ID() fed the halt slot, the volume shard and the fill
event alike. A fabricated key names a slot nobody set, and the swap
settles while the real market is halted.

Resolving once above the phase switch and passing the resolved poolID
down means no phase -- including one added later -- can key on anything
the registry has not admitted. checkHalt no longer accepts a key, so it
cannot derive one.

Co-authored-by: Hanzo Dev <[email protected]>

2026-09-08 02:41:14 -07:00

..

testdata

decomplect: retire pqcrypto bundle (0x9003) — standalone mldsa/mlkem/slhdsa is the one way

2026-06-27 16:08:48 -07:00

arithmetic_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

asset_onchain_verifier.go

dex: the seam's unit of work is an order, not an intent

2026-08-07 16:13:01 -07:00

asset_resolver_testhelp_test.go

fix(dex/9999): exact-integer ZAP price wire + fold dexcore/lx -> pkg/dex

2026-07-02 10:56:00 -07:00

asset_resolver.go

fix(dex/9999): exact-integer ZAP price wire + fold dexcore/lx -> pkg/dex

2026-07-02 10:56:00 -07:00

asset.go

dex: native C<->D atomic settlement seam (0x9999) + Red fixes 2/3/4

2026-06-21 00:18:54 -07:00

callindex_test.go

dex: the call index in a claim id was never observed by a test

2026-08-07 21:48:28 -07:00

core_store.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

custody_backing_test.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

custody_identity_test.go

dex: retire creditPositionFee — it reflected fees the D-Chain does not compute

2026-08-07 21:46:47 -07:00

dchain_client.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

DEPLOY.md

docs: chain routes are /v1/chain

2026-08-30 17:17:26 -07:00

dex_test.go

dex(0x9999): decentralize halt authority + commit the value-path proof tests

2026-06-22 22:50:00 -07:00

dexfill_event_test.go

dex: the funding rail carries value, and nothing else

2026-08-07 17:33:14 -07:00

engine.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

erc20_code_test.go

dex: an exact-output quote answers the exact-output question

2026-08-28 14:14:21 -07:00

erc20_vault.go

precompile/dex: 0x9010 no-simulation + CLOB custody + ERC-20 atomic legs

2026-06-19 11:34:41 -07:00

events_encoding_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

events.go

feat(dex): 0x9999 settlement logs emit unconditionally (genesis-active, no dated fork)

2026-06-26 14:40:01 -07:00

fill_attestation_test.go

fix: gofmt -s across repo (CI format check)

2026-06-02 23:27:11 -07:00

fill_attestation.go

fix: gofmt -s across repo (CI format check)

2026-06-02 23:27:11 -07:00

full_math.go

refactor: clean precompile names — v4-aligned, no aliases

2026-03-02 16:54:55 +00:00

halt9999.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

halt_governance_test.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

hooks_test.go

refactor: clean precompile names — v4-aligned, no aliases

2026-03-02 16:54:55 +00:00

hooks.go

dex, fhe, contract: a 256-bit word narrowed to a machine integer without saying so

2026-08-28 15:08:29 -07:00

interest_rate.go

chore: update deps, fix node/vms to vm/vms imports, remove stub files

2026-01-09 08:48:29 +00:00

lending_test.go

chore: update deps, fix node/vms to vm/vms imports, remove stub files

2026-01-09 08:48:29 +00:00

lending.go

chore: update deps, fix node/vms to vm/vms imports, remove stub files

2026-01-09 08:48:29 +00:00

liquid_test.go

chore: update deps, fix node/vms to vm/vms imports, remove stub files

2026-01-09 08:48:29 +00:00

liquid.go

dex, fhe, contract: a 256-bit word narrowed to a machine integer without saying so

2026-08-28 15:08:29 -07:00

liquidation.go

feat: precompiles — anchor, babyjubjub EIP-2494, coverage, slug validation

2026-03-02 02:00:00 +00:00

liquidity_amounts.go

refactor: clean precompile names — v4-aligned, no aliases

2026-03-02 16:54:55 +00:00

margin.go

dex, fhe, contract: a 256-bit word narrowed to a machine integer without saying so

2026-08-28 15:08:29 -07:00

mock_snapshot_test.go

dex: the seam's unit of work is an order, not an intent

2026-08-07 16:13:01 -07:00

module_abi_test.go

feat: precompiles — anchor, babyjubjub EIP-2494, coverage, slug validation

2026-03-02 02:00:00 +00:00

module_config_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

module_erc20.go

dex: an exact-output quote answers the exact-output question

2026-08-28 14:14:21 -07:00

module.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

native_atomicity_test.go

dex: the funding rail carries value, and nothing else

2026-08-07 17:33:14 -07:00

native_conservation_test.go

dex: the funding rail carries value, and nothing else

2026-08-07 17:33:14 -07:00

native_dchain_client.go

dex: an exact-output quote answers the exact-output question

2026-08-28 14:14:21 -07:00

native_events.go

dex: the package builds again

2026-08-28 11:38:50 -07:00

native_haltwindow_test.go

dex: the funding rail carries value, and nothing else

2026-08-07 17:33:14 -07:00

native_harness_test.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

native_lp_test.go

dex: retire creditPositionFee — it reflected fees the D-Chain does not compute

2026-08-07 21:46:47 -07:00

native_seam_parity_test.go

dex: the funding rail carries value, and nothing else

2026-08-07 17:33:14 -07:00

native_seed_test.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

native_settle_test.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

native_staging.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

native_state.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

native_version_test.go

dex: the two version stamps did not move when the object they version did

2026-08-07 21:34:50 -07:00

native_wire.go

wip: C-side funding rail un-braid (build green)

2026-08-07 17:23:58 -07:00

native_zap.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

pause_freeze_test.go

dex: decomplect to canonical settle-only 0x9999 (remove embedded matcher)

2026-07-04 12:52:44 -07:00

pausefreeze_test.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

perpetuals.go

dex, fhe, contract: a 256-bit word narrowed to a machine integer without saying so

2026-08-28 15:08:29 -07:00

pool_manager_test.go

dex: decomplect to canonical settle-only 0x9999 (remove embedded matcher)

2026-07-04 12:52:44 -07:00

pool_manager.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

position_commit.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

position_guard_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

position_module.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

position_owner_test.go

dex: a collect took whose-record from the calldata, so it took it from the attacker

2026-08-07 21:32:02 -07:00

quote_direction_test.go

dex: an exact-output quote answers the exact-output question

2026-08-28 14:14:21 -07:00

quoter_module.go

dex: an exact-output quote answers the exact-output question

2026-08-28 14:14:21 -07:00

readonly_alwayson_test.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

redteam_fixes_test.go

refactor(precompileconfig)!: warp v1.21.0 decomplect — AddMessage takes *warp.Core

2026-06-26 22:23:21 -07:00

redteam_round2_test.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

router_codec_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

router_config_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

router_gas_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

router_module.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

router_test.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

router_v2_wire_test.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

router.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

settle9999.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

settle_addr.go

dex: the seam's unit of work is an order, not an intent

2026-08-07 16:13:01 -07:00

settle_custody.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

settle_decomplect_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

settle_erc20_callseam_test.go

feat(dex): 0x9999 settlement logs emit unconditionally (genesis-active, no dated fork)

2026-06-26 14:40:01 -07:00

settle_hookdata.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

settle_import_test.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

settle_import.go

dex: the two version stamps did not move when the object they version did

2026-08-07 21:34:50 -07:00

settle_maker.go

dex: decomplect to canonical settle-only 0x9999 (remove embedded matcher)

2026-07-04 12:52:44 -07:00

settle_market.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

settle_module.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

settle_seed.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

settle_surface_test.go

dex: the funding rail carries value, and nothing else

2026-08-07 17:33:14 -07:00

settle_views9999.go

dex: native V4 receipt-settlement precompile surface at 0x9999 (LP-9999)

2026-06-20 14:47:54 -07:00

slippage_tick_test.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

sqrt_price_math.go

refactor: clean precompile names — v4-aligned, no aliases

2026-03-02 16:54:55 +00:00

state_export_test.go

dex: decomplect to canonical settle-only 0x9999 (remove embedded matcher)

2026-07-04 12:52:44 -07:00

state_export.go

feat: precompiles — anchor, babyjubjub EIP-2494, coverage, slug validation

2026-03-02 02:00:00 +00:00

stateview_module.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

swap_admission_test.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

swap_amm_pool.go

dex: decomplect to canonical settle-only 0x9999 (remove embedded matcher)

2026-07-04 12:52:44 -07:00

swap_math.go

refactor: clean precompile names — v4-aligned, no aliases

2026-03-02 16:54:55 +00:00

teleport.go

chore: update deps, fix node/vms to vm/vms imports, remove stub files

2026-01-09 08:48:29 +00:00

tick_bitmap_math.go

feat: precompiles — anchor, babyjubjub EIP-2494, coverage, slug validation

2026-03-02 02:00:00 +00:00

tick_math.go

fix: gofmt -s across repo (CI format check)

2026-06-02 23:27:11 -07:00

tick_types.go

refactor: clean precompile names — v4-aligned, no aliases

2026-03-02 16:54:55 +00:00

transmuter.go

refactor: clean precompile names — v4-aligned, no aliases

2026-03-02 16:54:55 +00:00

types.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

vaults.go

chore: update deps, fix node/vms to vm/vms imports, remove stub files

2026-01-09 08:48:29 +00:00

view_projection_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzblue_meter_test.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

zzblueA_dchain_test.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

zzblueB_router_test.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

zzblueC_settle_test.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

zzblueD_hooks_test.go

dex, fhe, contract: a 256-bit word narrowed to a machine integer without saying so

2026-08-28 15:08:29 -07:00

zzblueE_view_test.go

dex, fhe: finish the refactor the merge half-applied

2026-08-28 20:19:27 -07:00

zzblueF_admit_test.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

zzcredit_harness_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzcredit_lending_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzcredit_liquid_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzcredit_liquidation_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzcredit_rate_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzlev_margin_test.go

dex: pin what margin, perps, teleport and vaults actually do

2026-08-28 11:48:47 -07:00

zzlev_perps_test.go

dex, fhe, contract: a 256-bit word narrowed to a machine integer without saying so

2026-08-28 15:08:29 -07:00

zzlev_teleport_test.go

dex: pin what margin, perps, teleport and vaults actually do

2026-08-28 11:48:47 -07:00

zzlev_vaults_test.go

dex: pin what margin, perps, teleport and vaults actually do

2026-08-28 11:48:47 -07:00

zzmop_attest_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzmop_custody_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzmop_dchain_test.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

zzmop_hooks_test.go

dex, e2e, LLM.md: pin the hook and market surfaces, and point e2e at current deps

2026-08-28 15:39:28 -07:00

zzmop_market_test.go

dex, e2e, LLM.md: pin the hook and market surfaces, and point e2e at current deps

2026-08-28 15:39:28 -07:00

zzmop_seed_test.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

zzmop_settle9999_test.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

zzmop_transmuter_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzmop_zap_test.go

Merge github/main into the hardening branch

2026-08-28 20:13:25 -07:00

zznarrow_engine_test.go

dex, fhe, contract: a 256-bit word narrowed to a machine integer without saying so

2026-08-28 15:08:29 -07:00

zznarrow_test.go

Resolve the market before a swap can name a halt

2026-09-08 02:41:14 -07:00

zzpool_bind_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzpool_custody_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzpool_harness_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzpool_slot_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzpool_state_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzpool_vault_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzstore_corestore_test.go

dex: an exact-output quote answers the exact-output question

2026-08-28 14:14:21 -07:00

zzstore_export_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00

zzstore_module_test.go

dex, fhe, contract: a 256-bit word narrowed to a machine integer without saying so

2026-08-28 15:08:29 -07:00

zzstore_probe_test.go

stableswap, math: two halts from calldata, and a pool that leaked a wei per swap

2026-08-28 13:46:40 -07:00