[Security Bulletin] Batched Immunefi-reported Weakness Disclosure — March 2026 (funds not at risk)

[AlexDry]

@TheDZhon

The fix will disable partial withdrawals when a vault has outstanding obligations which may be revised later depending on further research.

The updated implementation has been deployed:

• VaultHub: 0x6330fE7756FBE8649adfb9A541d61C5edB8B4D70

Proposed items for the upcoming vote:

1. Upgrade VaultHub proxy 0x1d201BE093d847f6446530Efb0E8Fb426d176709 implementation to 0x6330fE7756FBE8649adfb9A541d61C5edB8B4D70.

Audit reports can be found here.