Security context

Highlights

Integer Overflow: 2 prior fixes. Scrutinize any change in this area.

src/end.sol: most-fixed (1 issue). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Integer Overflow: Unsigned-to-signed conversion and accounting logic in core debt-balancing functions like heal and suck can lead to integer overflow/underflow vectors if signed and unsigned logic are conflated.

Integer Overflow: Explicitly casting large unsigned values (uint) to signed integers (int) without safety boundaries allows attackers to overflow the type capacity, corrupting internal balances during asset movements.

Auth Bypass: Lack of global settlement state-validation checks could allow unauthorized modifications to governance parameters or wards after the system has initiated its emergency shutdown sequence (cage).