Skip to content

Commit 8751336

Browse files
guil-lambertguil-lambert
authored
Merge pull request #485 from guil-lambert/autorun/run-19
[autorun] DEFI@home submissions — 19
2 parents 37c4ad3 + 043df87 commit 8751336

13 files changed

Lines changed: 3209 additions & 0 deletions

‎data/submissions/armitage-by-wintermute/discovery/autorun-claude-sonnet-4-6-2026-09-01-100e.json‎

Lines changed: 144 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,144 @@
1+
{
2+
"schema_version": 4,
3+
"slug": "armitage-by-wintermute",
4+
"slice": "discovery",
5+
"snapshot_generated_at": "2026-08-31T12:37:29.910Z",
6+
"prompt_version": 29,
7+
"analysis_date": "2026-09-01",
8+
"model": "claude-sonnet-4-6 (autorun)",
9+
"chat_url": null,
10+
"grading_basis": "mixed",
11+
"grade": "unknown",
12+
"headline": "5 contract addresses catalogued on Ethereum (3 Morpho vaults, 1 owner multisig, 1 curator multisig); no GitHub or audit links found; on-chain reads not performed this run.",
13+
"short_headline": "5 contracts on Ethereum, docs-sourced",
14+
"rationale": {
15+
"findings": [
16+
{
17+
"code": "D1",
18+
"text": "D1: Block-explorer name-tag search not attempted via direct fetch (fetch quota exhausted); addresses discovered via official docs instead. Etherscan links for multisig addresses appear in docs and are recorded in evidence."
19+
},
20+
{
21+
"code": "D2",
22+
"text": "D2: Official docs at armitage.wintermute.com/docs list deployment details for three live vaults: Wintermute USDC Prime (0x5dc53a23AdC9f2Bed98de6F59F7F309a7c71FF2B), Wintermute USDC Select (0xA2EAaD0D586cF9FD73bb2c09cF6A7E3e187D68cd), and Pendle Ecosystem USDC (0x55C1B6e461a6334B567bAF0FEb5D728715446f05). All three share the same Owner (Safe 4/6: 0xb83a77677c51aaf6c45b0b64199eae6938559e5e) and Curator (Safe 3/5: 0x4687e45bb5518a995913a24bb2816fe2031d74d8). Apex vault is planned but not yet deployed."
23+
},
24+
{
25+
"code": "D3",
26+
"text": "D3: No audit links were provided in the per-protocol context, and no audit PDFs or reports were surfaced from the website or docs. The risks page mentions due diligence processes but cites no external audit firms or reports."
27+
},
28+
{
29+
"code": "D4",
30+
"text": "D4: No GitHub repository was provided in the per-protocol context and none surfaced from the website or docs. Armitage curates existing Morpho Vault V2 infrastructure rather than deploying its own smart contracts, so absence of a protocol-owned GitHub repo is architecturally expected."
31+
},
32+
{
33+
"code": "D5",
34+
"text": "D5: Protocol is Ethereum-only per pinned context and docs. No multi-chain enumeration required. Docs note Apex (planned) and future chains are in scope but undeployed."
35+
},
36+
{
37+
"code": "D6",
38+
"text": "D6: No factory addresses discovered. Armitage vaults are curated Morpho Vault V2 instances, not products of a proprietary factory. Market allocations (cbBTC/USDC, wstETH/USDC, WBTC/USDC for Prime; 7 markets for Select; 4 Pendle PT markets for Ecosystem) are referenced via Morpho UI links but are Morpho Blue market IDs, not Armitage-controlled factory children."
39+
},
40+
{
41+
"code": "D7",
42+
"text": "D7: Role taxonomy applied: vault contracts tagged as 'vault'; owner multisig tagged as 'owner' (actor_class: multisig, threshold 4/6); curator multisig tagged as 'other' with role 'curator' (actor_class: multisig, threshold 3/5). Allocator and Sentinel roles exist per Morpho Vault V2 RBAC but addresses were not surfaced in docs this run."
43+
},
44+
{
45+
"code": "D8",
46+
"text": "D8: All five addresses in admin_addresses[] trace directly to fetched docs pages (armitage.wintermute.com/docs/vaults/prime, /docs/vaults/ecosystem, /docs/llms-full.txt). No addresses sourced from snippets only."
47+
}
48+
],
49+
"steelman": null,
50+
"verdict": "Discovery run walked the official website, all vault-specific docs pages, and the full LLM documentation export. Five addresses were catalogued: three Morpho Vault V2 vault contracts and two Safe multisigs (owner and curator) shared across all vaults. No GitHub repo, no audit PDFs, and no block-explorer name-tag data were reachable this run. On-chain reads were not performed due to fetch quota exhaustion; those are recorded in unknowns[]."
51+
},
52+
"evidence": [
53+
{
54+
"url": "https://armitage.wintermute.com",
55+
"shows": "Capability probe: website loads; confirms Armitage is Wintermute's vault curation arm on Morpho with three live vaults (USDC Prime ~$24M TVL, USDC Select ~$43M TVL, Pendle Ecosystem USDC ~$49M TVL) on Ethereum",
56+
"chain": "Ethereum",
57+
"fetched_at": "2026-09-01T00:00:00Z"
58+
},
59+
{
60+
"url": "https://armitage.wintermute.com/docs/vaults/prime",
61+
"shows": "Wintermute USDC Prime vault deployment address 0x5dc53a23AdC9f2Bed98de6F59F7F309a7c71FF2B on Ethereum; Owner is Safe Multisig 4/6 at 0xb83a77677c51aaf6c45b0b64199eae6938559e5e; Curator is Safe Multisig 3/5 at 0x4687e45bb5518a995913a24bb2816fe2031d74d8; 0% fees; timelocks 3-day minimum for market additions, 7-day for critical actions",
62+
"chain": "Ethereum",
63+
"address": "0x5dc53a23AdC9f2Bed98de6F59F7F309a7c71FF2B",
64+
"fetched_at": "2026-09-01T00:00:00Z"
65+
},
66+
{
67+
"url": "https://armitage.wintermute.com/docs/vaults/ecosystem",
68+
"shows": "Pendle Ecosystem USDC vault deployment address 0x55C1B6e461a6334B567bAF0FEb5D728715446f05 on Ethereum; Owner is Safe Multisig 4/6 at 0xb83a77677c51aaf6c45b0b64199eae6938559e5e; Curator is Safe Multisig 3/5 at 0x4687e45bb5518a995913a24bb2816fe2031d74d8; 5% performance fee; allocates to Pendle PT markets",
69+
"chain": "Ethereum",
70+
"address": "0x55C1B6e461a6334B567bAF0FEb5D728715446f05",
71+
"fetched_at": "2026-09-01T00:00:00Z"
72+
},
73+
{
74+
"url": "https://armitage.wintermute.com/docs/vault-infrastructure",
75+
"shows": "Morpho Vault V2 role-based access control: Owner (high-level config/timelocks), Curator (strategy: market additions/caps/policy), Allocator (operational rebalancing), Sentinel (emergency derisking without delay); transparency via Morpho dashboard",
76+
"chain": "Ethereum",
77+
"fetched_at": "2026-09-01T00:00:00Z"
78+
},
79+
{
80+
"url": "https://armitage.wintermute.com/docs/llms-full.txt",
81+
"shows": "Wintermute USDC Select vault deployment address 0xA2EAaD0D586cF9FD73bb2c09cF6A7E3e187D68cd on Ethereum; Owner is Safe Multisig 4/6 at 0xb83a77677c51aaf6c45b0b64199eae6938559e5e; Curator is Safe Multisig 3/5 at 0x4687e45bb5518a995913a24bb2816fe2031d74d8; 0% fees; allocates to 7 markets including v-wmtUSDC and Pendle PT positions; Apex tier planned but not yet deployed; risk monitoring via Hypernative and internal risk engine",
82+
"chain": "Ethereum",
83+
"address": "0xA2EAaD0D586cF9FD73bb2c09cF6A7E3e187D68cd",
84+
"fetched_at": "2026-09-01T00:00:00Z"
85+
},
86+
{
87+
"url": "https://www.wintermute.com/insights/news/wintermute-launches-armitage-bringing-its-defi-and-trading-expertise-to-vault-curation",
88+
"shows": "Armitage launched May 2026; first two USDC vaults deployed on Morpho; Armitage executes liquidations internally rather than relying on third-party liquidators; Igor Igamberdiev (Wintermute Head of Research, SEAL 911) cited as key contributor"
89+
},
90+
{
91+
"url": "https://armitage.wintermute.com/docs/vaults/core",
92+
"shows": "Core vault group has three tiers: Prime (live), Select (live), Apex (planned/not deployed); both deployed vaults use Morpho Vault V2 with Morpho Blue markets",
93+
"chain": "Ethereum",
94+
"fetched_at": "2026-09-01T00:00:00Z"
95+
}
96+
],
97+
"unknowns": [
98+
"D1: Etherscan name-tag search for 'Armitage' not performed via block explorer direct fetch — fetch quota exhausted; addresses discovered via official docs instead. Etherscan links for multisig addresses embedded in docs but not independently verified on-chain this run. D1-offchain",
99+
"D3: No audit reports found for Armitage; the protocol curates existing Morpho Vault V2 infrastructure but no proprietary contract audit PDFs were linked or discoverable",
100+
"D4: No GitHub repository found for Armitage by Wintermute; no deployment artifacts or address indexes available",
101+
"D6: Allocator and Sentinel role addresses for each vault not surfaced in docs this run; these exist per Morpho Vault V2 RBAC but were not disclosed in the official documentation pages fetched",
102+
"D6: On-chain read of vault Owner/Curator/Allocator/Sentinel role addresses via DeFiPunkd API not performed (fetch quota exhausted) — D6-offchain",
103+
"D8: On-chain verification of Safe multisig thresholds (4/6 owner at 0xb83a77677c51aaf6c45b0b64199eae6938559e5e; 3/5 curator at 0x4687e45bb5518a995913a24bb2816fe2031d74d8) not performed this run — D8-offchain"
104+
],
105+
"protocol_metadata": {
106+
"docs_url": "https://armitage.wintermute.com/docs",
107+
"audits": [],
108+
"deployed_contracts_doc": "https://armitage.wintermute.com/docs/vaults/prime",
109+
"admin_addresses": [
110+
{
111+
"chain": "Ethereum",
112+
"address": "0x5dc53a23AdC9f2Bed98de6F59F7F309a7c71FF2B",
113+
"role": "vault (Wintermute USDC Prime, Morpho Vault V2)",
114+
"actor_class": "unknown"
115+
},
116+
{
117+
"chain": "Ethereum",
118+
"address": "0xA2EAaD0D586cF9FD73bb2c09cF6A7E3e187D68cd",
119+
"role": "vault (Wintermute USDC Select, Morpho Vault V2)",
120+
"actor_class": "unknown"
121+
},
122+
{
123+
"chain": "Ethereum",
124+
"address": "0x55C1B6e461a6334B567bAF0FEb5D728715446f05",
125+
"role": "vault (Pendle Ecosystem USDC, Morpho Vault V2)",
126+
"actor_class": "unknown"
127+
},
128+
{
129+
"chain": "Ethereum",
130+
"address": "0xb83a77677c51aaf6c45b0b64199eae6938559e5e",
131+
"role": "owner (Safe Multisig 4/6, shared across all three vaults)",
132+
"actor_class": "multisig"
133+
},
134+
{
135+
"chain": "Ethereum",
136+
"address": "0x4687e45bb5518a995913a24bb2816fe2031d74d8",
137+
"role": "other (curator Safe Multisig 3/5, shared across all three vaults)",
138+
"actor_class": "multisig"
139+
}
140+
],
141+
"upgradeability": "unknown",
142+
"about": "Armitage is Wintermute's onchain vault curation arm, launched in May 2026, that curates Morpho Vault V2 lending vaults on Ethereum. Depositors supply USDC into one of three vaults (Prime, Select, or Pendle Ecosystem USDC), and Armitage allocates that capital across Morpho Blue lending markets using institutional risk management and Wintermute's trading infrastructure. Unlike most curators, Armitage executes liquidations internally across every supported market, enabling it to accept a broader range of collateral types. Vaults are non-custodial and permissionless; depositors can withdraw at any time subject to market liquidity."
143+
}
144+
}

‎data/submissions/avalon-superearn/discovery/autorun-claude-sonnet-4-6-2026-09-01-a81c.json‎

Lines changed: 163 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,163 @@
1+
{
2+
"schema_version": 4,
3+
"slug": "avalon-superearn",
4+
"slice": "discovery",
5+
"snapshot_generated_at": "2026-08-31T12:37:29.910Z",
6+
"prompt_version": 29,
7+
"analysis_date": "2026-09-01",
8+
"model": "claude-sonnet-4-6 (autorun)",
9+
"chat_url": null,
10+
"grading_basis": "mixed",
11+
"grade": "unknown",
12+
"headline": "9 Avalon Labs contracts catalogued on Ethereum from Etherscan name-tag search; no dedicated SuperEarn vault contract or docs page located; AVL governance token, USDa OFT, staking, multisig, and deployer EOA surfaced.",
13+
"short_headline": "9 contracts found; SuperEarn vault unlocated",
14+
"rationale": {
15+
"findings": [
16+
{
17+
"code": "D1",
18+
"text": "Etherscan name-tag search surfaced: USDa Token (0x8a60e489…), Avalon Labs Deployer EOA (0xd955f0c1…), AVL Staking (0x2c9B3D4e…), sAVL Token (0xdb8d7761…), AVL Token (0x5c8d0c48…), a Safe 1.4.1 multisig (0x74e878f4…) receiving execTransaction calls from deployer, plus proxy 0x04Ce218e and relay 0xAcdDAC6C seen in USDa internal transactions. Two Avalon aToken contracts (0xc6ab82fc and 0x2e6500a7) also surfaced in deployer token holdings."
19+
},
20+
{
21+
"code": "D2",
22+
"text": "Protocol website (https://app.avalonfinance.xyz/earn) returned geo-restricted HTML with no contract addresses. No deployed-contracts doc page was discoverable in this run."
23+
},
24+
{
25+
"code": "D3",
26+
"text": "No audit_links provided in protocol context. No audit PDFs discovered via website or search in this run."
27+
},
28+
{
29+
"code": "D4",
30+
"text": "No GitHub org/repo was recorded in protocol context. No GitHub repo discovered in this run via search or website."
31+
},
32+
{
33+
"code": "D5",
34+
"text": "Protocol.chains lists only Ethereum; DeFiLlama also shows TVL on Movement chain (~$30M) but Movement is not in the supported chainId list for this run. Ethereum-only discovery performed."
35+
},
36+
{
37+
"code": "D6",
38+
"text": "No factory contract surfaced. AVL Staking at 0x2c9B3D4e appears to be a single staking contract, not a factory. Cap notice not triggered."
39+
},
40+
{
41+
"code": "D7",
42+
"text": "Role taxonomy applied: USDa Token (token), AVL Token (token), sAVL Token (token), AVL Staking (other/staking), Deployer (admin/EOA), Safe multisig (multisig), proxy 0x04Ce218e (other/proxy), relay 0xAcdDAC6C (other/bridge-relay), aTokens (other/yield-token)."
43+
},
44+
{
45+
"code": "D8",
46+
"text": "All addresses in admin_addresses[] trace to fetched Etherscan pages in this run. The specific SuperEarn yield vault/strategy contract on Ethereum was not located — only the USDa stablecoin and AVL governance ecosystem were found. This is a critical gap for the SuperEarn yield product assessment."
47+
}
48+
],
49+
"steelman": null,
50+
"verdict": "Corpora walked: Etherscan name-tag search (D1), protocol website (D2, blocked), no GitHub (D4), no audits (D3). 9 Avalon Labs ecosystem contracts catalogued on Ethereum; the specific SuperEarn vault/strategy/yield contract was not located. Protocol is categorised as Yield but the on-chain yield mechanism contract remains undiscovered this run."
51+
},
52+
"evidence": [
53+
{
54+
"url": "https://etherscan.io/address/0x8a60e489004ca22d775c5f2c657598278d17d9c2",
55+
"shows": "Avalon Labs: USDa Token — ERC-20 OFT contract on Ethereum, deployed by 0xd955F0c167adbf7d553fc4D59A964A1b115Cc093 (Avalon Labs: Deployer). Constructor args show LZ endpoint 0x1a44076050125825900e736c501f859c50fE728c and delegate 0xd955F0c167adbf7d553fc4D59A964A1b115Cc093. Source verified. Roles: ADMIN_ROLE, BURN_ROLE, MINT_ROLE, PAUSE_ROLE, MANAGER_ROLE.",
56+
"chain": "Ethereum",
57+
"address": "0x8a60e489004ca22d775c5f2c657598278d17d9c2",
58+
"fetched_at": "2026-09-01T09:40:00Z"
59+
},
60+
{
61+
"url": "https://etherscan.io/address/0xd955f0c167adbf7d553fc4d59a964a1b115cc093",
62+
"shows": "Avalon Labs: Deployer — EOA, contract creator for USDa Token and interacted with AVL Staking (0x2c9B3D4e7A82FeEc1843c1e0e6F1c8fdcb7a1680) and sAVL Token (0xdb8d776139e635E9Ab422a295D47629762b33B50). Also sent execTransaction to Safe multisig 0x74e878f47C5B1F01571e727F25271C1a34bf2cC1. Holds aToken contracts 0xc6ab82fc and 0x2e6500a7. Active across 9 chains.",
63+
"chain": "Ethereum",
64+
"address": "0xd955f0c167adbf7d553fc4d59a964a1b115cc093",
65+
"fetched_at": "2026-09-01T09:40:30Z"
66+
},
67+
{
68+
"url": "https://app.avalonfinance.xyz/earn",
69+
"shows": "Website returned geo-restricted access page with no contract addresses. Meta tags confirm avalonfinance.xyz is the canonical domain for Avalon Labs, described as 'Empower Omnichain Liquidity for BTCFi. Creator of $USDa'.",
70+
"fetched_at": "2026-09-01T09:39:00Z"
71+
},
72+
{
73+
"url": "https://defillama2.llamao.fi/protocol/avalon-superearn",
74+
"shows": "DeFiLlama shows Avalon Superearn TVL ~$30.31M, primarily on Movement chain ($30.31M) with minimal Ethereum TVL ($1.2). Category: Yield. Website and Twitter linked.",
75+
"fetched_at": "2026-09-01T09:39:10Z"
76+
},
77+
{
78+
"url": "https://cryptorank.io/news/feed/8500a-avalon-labs-superearn-yield-product",
79+
"shows": "Avalon Labs launched SuperEarn on February 19, 2025, targeting 8-15% annual returns through quantitative trading, DeFi yield, and tokenized RWA strategies.",
80+
"fetched_at": "2026-09-01T09:39:10Z"
81+
}
82+
],
83+
"unknowns": [
84+
"D2: No deployed-contracts documentation page found — website is geo-restricted and no /docs/deployments URL discovered",
85+
"D3: No audit reports found — no audit_links in protocol context and none surfaced via search",
86+
"D4: No GitHub repository found — none recorded in protocol context, none discovered via search",
87+
"D5: Movement chain TVL (~$30M) is the dominant chain per DeFiLlama but Movement chainId is not supported in the DeFiPunkd API; zero addresses surfaced from Movement-specific sources",
88+
"D6: No SuperEarn-specific vault or strategy contract located on Ethereum — the yield product mechanism contract (if any) is not discoverable from current evidence; may be on Movement chain or off-chain",
89+
"D8: Safe multisig 0x74e878f47C5B1F01571e727F25271C1a34bf2cC1 owners/threshold not read in this run — needs next-run surfacer",
90+
"D8: Proxy 0x04Ce218ead72401702DD5f3E56cEDb7D2d477777 (seen in USDa internal txns) role not confirmed — needs next-run surfacer",
91+
"D8: Relay/bridge address 0xAcdDAC6C77318B615f7F6fB9bb67c6833e9c05f1 role not confirmed — needs next-run surfacer",
92+
"D8: aToken 0xc6ab82fc782e29b385e775aa0d12c3278358c9e2 (aEthLSDPTcornSolvBTCBBN) role not confirmed — needs next-run surfacer",
93+
"D8: aToken 0x2e6500a7add9a788753a897e4e3477f651c612eb (aEthLSDSOLVBTCBBN) role not confirmed — needs next-run surfacer",
94+
"D8: Second USDa token variant 0x0b4d6da52df60d44ce7140f1044f2ad5fabd6316 seen in deployer holdings — role not confirmed offchain-only",
95+
"D1: AVL Token 0x5c8d0c48810fd37a0a824d074ee290e64f7a8fa2 full Etherscan page not fetched this run — snippet-only sighting"
96+
],
97+
"protocol_metadata": {
98+
"audits": [],
99+
"voting_token": {
100+
"chain": "Ethereum",
101+
"address": "0x5c8d0c48810fd37a0a824d074ee290e64f7a8fa2",
102+
"symbol": "AVL"
103+
},
104+
"admin_addresses": [
105+
{
106+
"chain": "Ethereum",
107+
"address": "0xd955f0c167adbf7d553fc4d59a964a1b115cc093",
108+
"role": "admin",
109+
"actor_class": "eoa"
110+
},
111+
{
112+
"chain": "Ethereum",
113+
"address": "0x8a60e489004ca22d775c5f2c657598278d17d9c2",
114+
"role": "token",
115+
"actor_class": "unknown"
116+
},
117+
{
118+
"chain": "Ethereum",
119+
"address": "0x5c8d0c48810fd37a0a824d074ee290e64f7a8fa2",
120+
"role": "token",
121+
"actor_class": "unknown"
122+
},
123+
{
124+
"chain": "Ethereum",
125+
"address": "0x2c9b3d4e7a82feec1843c1e0e6f1c8fdcb7a1680",
126+
"role": "other",
127+
"actor_class": "unknown"
128+
},
129+
{
130+
"chain": "Ethereum",
131+
"address": "0xdb8d776139e635e9ab422a295d47629762b33b50",
132+
"role": "token",
133+
"actor_class": "unknown"
134+
},
135+
{
136+
"chain": "Ethereum",
137+
"address": "0x74e878f47c5b1f01571e727f25271c1a34bf2cc1",
138+
"role": "multisig",
139+
"actor_class": "multisig"
140+
},
141+
{
142+
"chain": "Ethereum",
143+
"address": "0x04ce218ead72401702dd5f3e56cedb7d2d477777",
144+
"role": "other",
145+
"actor_class": "unknown"
146+
},
147+
{
148+
"chain": "Ethereum",
149+
"address": "0xc6ab82fc782e29b385e775aa0d12c3278358c9e2",
150+
"role": "other",
151+
"actor_class": "unknown"
152+
},
153+
{
154+
"chain": "Ethereum",
155+
"address": "0x2e6500a7add9a788753a897e4e3477f651c612eb",
156+
"role": "other",
157+
"actor_class": "unknown"
158+
}
159+
],
160+
"upgradeability": "unknown",
161+
"about": "Avalon Labs is a Bitcoin-focused CeDeFi platform that allows users to borrow against BTC-derivative collateral and earn yield through its SuperEarn product. SuperEarn targets 8–15% annual returns by combining quantitative trading strategies, DeFi yield opportunities, and tokenized real-world asset (RWA) exposure. The platform issues USDa, a LayerZero OFT-enabled stablecoin deployable across multiple chains, and uses an AVL governance token with a staking mechanism (sAVL). The dominant TVL concentration as of this run is on the Movement chain (~$30M), with minimal Ethereum TVL ($1.2)."
162+
}
163+
}

0 commit comments

Comments
 (0)