Release Notes: v0.8.1-beta → v0.9.0

Summary

This release addresses security findings from both Cantina and ChainSecurity audit reports. Key Security Improvements:

Cantina Issues

3.1 High Risk

3.1.1 onlyOwner Restriction on isPluginAllowed() Blocks Plugin Registration for Newly Deployed Tokens

Issue: #938 Fix: commit 7d6d17cec6e9f611c7c483fb3b9ef820364fd7b2 Author: aiwowo1 [email protected] Date: Wed Jul 16 11:31:34 2025 -0400

Enhanced plugin and fix test defects

1. Removed onlyOwner modifier from isPluginAllowed to allow public validation
2. Added explicit getter for immutable `pluginRegistry` in IAmmalgamFactory interface
3. Added test cases for updatePlugin() and enhanced addPlugin()
4. Fixed the `skip` test `testFarmingLiquidity`: now properly checks for allowed plugins before adding.
5. test using factory to get pluginRegistry for real case

3.1.2 Incorrect calculateSwapFeeBipsQ64 parameters when calculating the swap fee

Issues: #990, #996

Fix: commit cd2d4171c6b9c34a92c424faa363c3203458d5a7 Author: Eswara Sai [email protected] Date: Tue Sep 23 23:58:05 2025 +0530

[Cantina 3.1.2 & 3.2.3] fix: current and reference reserve params order in swap fee calculation (#1010)

3.1.3 Pair will be permanently bricked if utilization goes above MAX_UTILIZATION_PERCENT_IN_WAD

Issue: #967 Fix: commit 7b8786a9deda5a175eca653f1f5627e0460beeab Author: Yuehan Duan [email protected] Date: Sat Nov 15 15:41:06 2025 -0800