Taler Finance security record

The NAV circuit breaker in `Vault._checkNavCircuitBreaker()` compares the live `totalAssets()` against `cachedNav`, which is only updated during deposits, settlements, and executions. Since `Accounting.totalAssets()` reads the vault's raw `asset.balanceOf()`, an attacker can inflate the live NAV by transferring tokens directly to the vault without updating the cache. If the donation exceeds the `navSpikeThresholdBps` (default 20%), the circuit breaker will revert all subsequent deposits and redemption settlements until the `VAULT_OWNER` calls `refreshNavCache()`.

The `Accounting` module's `totalAssets()` function computes the sum of all position NAVs. If debt positions exceed asset positions such that the aggregate value becomes negative, the function reverts with `Accounting_NegativeTotalAssets`. This total is referenced by all core vault operations to ensure accounting consistency. However, this revert also blocks `executeAction()`, which calls `totalAssets()` for its post-execution NAV slippage check. The `executeAction()` function is the primary mechanism through which vault managers can interact with external protocols to unwind positions, repay debt, or otherwise restore the vault to solvency. When `totalAssets()` reverts, the very operations needed to recover from insolvency are themselves blocked. This could lead to a vault that becomes permanently stuck in an insolvent state, unable to recover through normal operations. The only recourse would be a UUPS contract upgrade, which introduces governance delay and operational complexity during what is likely already a time-sensitive scenario.

The protocol has no explicit upper bounds on two lists that are iterated in frequently used execution paths. In both cases, runtime cost scales linearly with list length, so sufficiently large lists can make vaults expensive for their users. This behavior requires privileged configuration and does not appear likely during normal operations based on current gas measurements, which is why the issue is informational. The occurrences are: 1. `Accounting.addPosition()` has no maximum position count. `totalAssets()` iterates all positions and calls `calculateNav()` for each adapter, so deposit and settlement related flows inherit this scaling behavior. 2. `FeeModule.addFeeEntry()` has no maximum entry count. `claimFees()` iterates all entries, calls `_settleEntry()`, and can call `vault.mintFeeShares()` per entry, so claiming cost increases with the number of entries and recipients.