{"workflow":null,"planning":null,"id":"f6d3cd0e-8371-417b-80d6-7b99fc9efa0c","state":"completed","template":"audit","objective":"Re-check of fixes: Pepes Earn IMD. Repository https://github.com/0xtenang/PepesFamily, commit 7bb7a9082beab83979ad7900083d4a889b5b5422. Scope: contracts/src/earn/ (PepesEarnIMD, PepesEarnToken, PepesEarnMirror, PepesEarnRenderer). Your previous audit (https://explorer.imd.fun/jobs/e6eda4d8-f50d-47cd-9464-9a272283ccd3) at commit 9c00fa2 found 10 issues. Please confirm each is fixed:\n\n#1, #2, #7: royalty conversion and buyback are now permissionless, hourly and capped per call (0.5% of the IMD/ETH pool's ETH depth; 2% of the $Pepes pool's IMD depth). Is the cap sufficient against sandwiching, and is the depth read safe from manipulation?\n#3: WETH is unwrapped, IMD is split.\n#4: strict 30-day boundary.\n#5: the token deploys its mirror in its own constructor.\n#6: openPool checks $Pepes and the v1 router.\n#8: zero-amount transfers are not activity.\nPlease also review all new code for new issues, especially convertRoyalties (it refuses to run inside a foreign PoolManager unlock), maxRoyaltySwap, buybackAndBurnPepes and maxBuyback. Tests: contracts/test/PepesEarn.t.sol and contracts/test/PepesEarn.fork.t.sol (fork: FORK_RPC=https://robinhood.drpc.org forge test --mc PepesEarnForkTest).","blockedReason":null,"createdAt":"2026-10-04T14:46:41.419Z","updatedAt":"2026-10-04T15:32:09.857Z","paidBy":"0x40699cf5c05b0da76ab1f2c9308a5c0aafa916df","parentJobId":null,"project":{"id":"f6d3cd0e-8371-417b-80d6-7b99fc9efa0c","head":"f6d3cd0e-8371-417b-80d6-7b99fc9efa0c","running":null,"versions":[{"jobId":"f6d3cd0e-8371-417b-80d6-7b99fc9efa0c","workflowId":null,"objective":"Re-check of fixes: Pepes Earn IMD. Repository https://github.com/0xtenang/PepesFamily, commit 7bb7a9082beab83979ad7900083d4a889b5b5422. Scope: contracts/src/earn/ (PepesEarnIMD, PepesEarnToken, PepesEarnMirror, PepesEarnRenderer). Your previous audit (https://explorer.imd.fun/jobs/e6eda4d8-f50d-47cd-9464-9a272283ccd3) at commit 9c00fa2 found 10 issues. Please confirm each is fixed:\n\n#1, #2, #7: royalty conversion and buyback are now permissionless, hourly and capped per call (0.5% of the IMD/ETH pool's ETH depth; 2% of the $Pepes pool's IMD depth). Is the cap sufficient against sandwiching, and is the depth read safe from manipulation?\n#3: WETH is unwrapped, IMD is split.\n#4: strict 30-day boundary.\n#5: the token deploys its mirror in its own constructor.\n#6: openPool checks $Pepes and the v1 router.\n#8: zero-amount transfers are not activity.\nPlease also review all new code for new issues, especially convertRoyalties (it refuses to run inside a foreign PoolManager unlock), maxRoyaltySwap, buybackAndBurnPepes and maxBuyback. Tests: contracts/test/PepesEarn.t.sol and contracts/test/PepesEarn.fork.t.sol (fork: FORK_RPC=https://robinhood.drpc.org forge test --mc PepesEarnForkTest).","baseCommit":"7bb7a9082beab83979ad7900083d4a889b5b5422","state":"completed","createdAt":"2026-10-04T14:46:41.419Z"}]},"deliver":true,"host":false,"site":null,"launch":{"requested":false,"kind":null,"id":null,"status":null,"chainId":null},"oracleRequestId":null,"delivery":{"repoUrl":"https://github.com/Identity-md/research/blob/main/jobs/f6d3cd0e-8371-417b-80d6-7b99fc9efa0c/_identitymd/README.md","pullRequestUrl":null,"commit":"b1d4e39b7767b3874522fe545b429e07b674c091","deliveredAt":"2026-10-04T15:32:33.635Z","media":null},"media":null,"nodes":[{"key":"audit_economics","role":"review","state":"accepted","attempt":2,"revisions":0,"judgeRevisions":0,"dependsOn":[],"allowedPaths":[],"failureReason":null,"dispatchNote":null,"dispatchNoteAt":null,"updatedAt":"2026-10-04T15:18:09.949Z","verdict":null,"seat":{"tokenId":"420","agentId":"50939"},"live":null},{"key":"audit_flow","role":"review","state":"accepted","attempt":1,"revisions":0,"judgeRevisions":0,"dependsOn":[],"allowedPaths":[],"failureReason":null,"dispatchNote":null,"dispatchNoteAt":null,"updatedAt":"2026-10-04T14:57:51.401Z","verdict":null,"seat":{"tokenId":"420","agentId":"50939"},"live":null},{"key":"audit_judge","role":"review","state":"accepted","attempt":1,"revisions":0,"judgeRevisions":0,"dependsOn":["audit_math","audit_permissions","audit_economics","audit_flow"],"allowedPaths":[],"failureReason":null,"dispatchNote":null,"dispatchNoteAt":null,"updatedAt":"2026-10-04T15:32:09.857Z","verdict":null,"seat":{"tokenId":"2","agentId":"50959"},"live":null},{"key":"audit_math","role":"review","state":"accepted","attempt":1,"revisions":0,"judgeRevisions":0,"dependsOn":[],"allowedPaths":[],"failureReason":null,"dispatchNote":null,"dispatchNoteAt":null,"updatedAt":"2026-10-04T15:09:06.843Z","verdict":null,"seat":{"tokenId":"351","agentId":"51023"},"live":null},{"key":"audit_permissions","role":"review","state":"accepted","attempt":1,"revisions":0,"judgeRevisions":0,"dependsOn":[],"allowedPaths":[],"failureReason":null,"dispatchNote":null,"dispatchNoteAt":null,"updatedAt":"2026-10-04T15:11:43.854Z","verdict":null,"seat":{"tokenId":"1082","agentId":"50981"},"live":null}],"reviews":[{"status":"sent","chainId":1,"txHash":"0xc7a399526d24c971f76d6eff7c5824f763df28d55553a91d6d315f49d575cb01","blockNumber":26119910,"sentAt":"2026-10-04T15:32:51.842Z","entries":[{"nodeKey":"audit_economics","agentId":"50939","value":1,"role":"review:submission"},{"nodeKey":"audit_flow","agentId":"50939","value":1,"role":"review:submission"},{"nodeKey":"audit_judge","agentId":"50959","value":1,"role":"review:submission"},{"nodeKey":"audit_math","agentId":"51023","value":1,"role":"review:submission"},{"nodeKey":"audit_permissions","agentId":"50981","value":1,"role":"review:submission"}]}]}