Fix WETH allowlist accepting unreviewed chains #9

• 
  @julien opened this merge request · Sep 18, 2026

  closes #10

  WETHRegistry.isKnownImplementation accepted a codehash on any chain that
  reproduces it. Canonical WETH9's bytecode has no chain-specific logic, so
  it's byte-identical everywhere — it could be registered on a chain whose
  native gas token isn't ETH, wrapping that native currency flawlessly while
  wrapping the wrong asset entirely. Named and described in
  docs/notes/native-currency-substitution.md.

  isKnownImplementation now pairs each hash with the exact chain IDs it was
  reviewed on. This moved WETHRegistry's creation code and CREATE2 address,
  so Love.REGISTRY and docs/MULTICHAIN.md are updated to match.

Sign in to comment.