The reviewed change introduces `MerkleDistributor`, a reusable contract for referral and campaign reward payouts. A root setter registers immutable Merkle roots whose leaves bind the chain, distributor address, recipient, strictly ordered token list, and amounts. Recipients may claim directly, while a delegated claimer may submit single or batched proofs on their behalf. Successful verification records one claim per root and account before transferring each token from the distributor balance, and administrative controls can pause a root, mark an account as claimed, or withdraw tokens. Only informational severity findings and one auditor suggestions were identified. All 245 tests across 29 Foundry suites passed. The in-scope contract recorded 95.83% branch coverage, although two end-to-end tests reverted during the instrumented coverage run.
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | - | - | - | - | 0 |
Acknowledged | 1 | - | - | - | 1 |
Fixed | - | - | - | - | 0 |
| Total | 1 | 0 | 0 | 0 | 1 |
| # | File Name |
|---|---|
| 1 | Scope not recorded here: see the report |