143-jEUR-freezing-v3-polygon.md

Proposal 143. Aave v3 Polygon - Freezing of jEUR

Voting link

https://app.aave.com/governance/proposal/?proposalId=143

Governance forum discussion

https://governance.aave.com/t/jeur-incident-plan-of-action/11379

BGD analysis

Proposal types

🔧 📊 params-update

🧊 freeze-asset

Context

Following an exploit on the Midas protocol affecting jEUR, this proposal freezes the jEUR asset on Aave v3 Polygon.

Proposal creation

Transaction: https://etherscan.io/tx/0x567fc957cbdeb0deca8630c6cc1bfd0dcffca2d1be881e21c8b8a73b14021871

- id: 143
- creator: 0xf71fc92e2949ccf6a5fd369a0b402ba80bc61e02
- executor: 0xee56e2b3d491590b5b31738cc34d5232f378a8d5
- targets: [0x158a6bc04f0828318821bae797f50b0a1299d45b]
- values: [0]
- signatures: [execute(address)]
- calldatas: [0x000000000000000000000000165e90bd0a41d08fa1891ccdcee315d7b83b3419]
- withDelegatecalls: [true]
- startBlock: 16442002
- endBlock: 16461202
- strategy: 0xb7e383ef9b1e9189fc0f71fb30af8aa14377429e
- ipfsHash: 0x0baa1d8fa1dbcd7a15276f668b234f9847ba2848f9aa6a4b79eaa6d927b92b8e

Aave Seatbelt report

Ethereum

https://github.com/bgd-labs/seatbelt-for-ghosts/blob/main/reports/Aave/0xEC568fffba86c094cf06b22134B23074DFE2252c/143.md

Polygon

https://github.com/bgd-labs/seatbelt-for-ghosts/blob/main/reports/Aave/0xEC568fffba86c094cf06b22134B23074DFE2252c/143_fx_11_0.md

Technical analysis

This is a cross-chain governance proposal, with its payload interacting with the Aave v3 Polygon by calling setReserveFreeze() on the Pool Configurator contract.

BGD validations

✅ The code on the proposal payload corresponds to the proposal specification.

✅ The proposal includes a proper tests suite, checking all necessary post-conditions.

✅ Only one payload used via delegatecall

✅ BGD wrote the payload.

❌ With BGD writing the payload, at least another party reviewed it.