feat: added withdrawal output with asset in for oracles [SUP-15736]

[supervaulter]

No description provided.

[linear]

SUP-15736 Update `YieldSourceOracle` contacts in core

[octane-security-app]

Summary by Octane

New Contracts

No new contracts were added in this PR.

Updated Contracts

• AbstractYieldSourceOracle.sol: Added getWithdrawalShareOutput function to calculate withdrawal share outputs in the smart contract.
• ERC4626YieldSourceOracle.sol: Added a new function, getWithdrawalShareOutput, for previewing withdrawal outputs of assets.
• ERC5115YieldSourceOracle.sol: "Added functions for withdrawal share output calculation and internalized asset/share output logic."
• ERC7540YieldSourceOracle.sol: Refactored conversion functions; added getWithdrawalShareOutput for asset conversion tracking.
• PendlePTYieldSourceOracle.sol: Functions for share and asset conversions are now handled by internal methods _getShareOutput and _getAssetOutput.
• SpectraPTYieldSourceOracle.sol: The contract now includes _getShareOutput and _getAssetOutput functions and adds getWithdrawalShareOutput for obtaining assets from shares.
• StakingYieldSourceOracle.sol: The smart contract now includes a getWithdrawalShareOutput function, returning the input assets.
• IYieldSourceOracle.sol: Added a function to calculate shares received for asset withdrawals, aiding in simulations and exchange rate assessments.
• MockYieldSourceOracle.sol: Added getWithdrawalShareOutput function to return input assets unchanged.

---

🔗 Commit Hash: 3851d32

[graphite-app]

How to use the Graphite Merge Queue

Add the label contracts to this PR to add it to the merge queue.

You must have a Graphite account in order to use the merge queue. Sign up using this link.

An organization admin has enabled the Graphite Merge Queue in this repository.

Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.

[octane-security-app]

Overview

Vulnerabilities found:	5
Severity breakdown:	2 Informational, 2 High, 1 Medium

Warnings found:	4

Detailed findings

src/accounting/BaseLedger.sol

• Constant PPS/decimals in StakingYieldSourceOracle combined with unbound oracle ID selection causes fee miscalculation in ledger accounting. See more
• Permissionless, user-chosen oracle configuration IDs accepted without whitelist in executor/ledger causes protocol fee bypass and fee hijacking. See more

src/accounting/oracles/ERC7540YieldSourceOracle.sol

• Rounding/fee-exclusion in ERC7540YieldSourceOracle.getWithdrawalShareOutput causes optimistic/incorrect withdrawal quotes and reverts. See more

src/accounting/oracles/StakingYieldSourceOracle.sol

• Missing PPS normalization for Unknown flavors in SuperYieldSourceOracle causes misquoted pricePerShare for non-18-decimal bases. See more

src/hooks/vaults/5115/Redeem5115VaultHook.sol

• Unit mismatch between canonical asset and tokenOut in ERC-5115 accounting causes fee under-collection. See more

Warnings

src/accounting/oracles/ERC4626YieldSourceOracle.sol

• Unbounded exponentiation of token decimals in yield source oracles causes per-asset denial-of-service via overflow reverts. See more

src/accounting/oracles/PendlePTYieldSourceOracle.sol

• Unchecked exponentiation/scaling in PendlePTYieldSourceOracle with untrusted market decimals/rates causes view-function DoS. See more
• Unbounded pow10 scaling in PendlePTYieldSourceOracle causes view-function DoS for misconfigured/abnormal markets. See more

src/executors/SuperExecutorBase.sol

• Unvetted manager-controlled ledger configuration in SuperLedgerConfiguration used by SuperExecutorBase causes principal expropriation during withdrawals. See more

---

🔗 Commit Hash: 3851d32
🛡️ Octane Dashboard: All vulnerabilities

[graphite-app]

Graphite Automations

"Request reviewers once CI passes" took an action on this PR • (10/07/25)

1 reviewer was added to this PR based on 's automation.

[codecov]

Codecov Report

❌ Patch coverage is 44.44444% with 15 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
...c/accounting/oracles/PendlePTYieldSourceOracle.sol	0.00%	11 Missing ⚠️
.../accounting/oracles/SpectraPTYieldSourceOracle.sol	0.00%	4 Missing ⚠️

📢 Thoughts on this report? Let us know!

[0xTimepunk]

The way it is calculated for 5115 is strange.
I'd pass this through Sujith and octane for a final review

Are we gonna deploy these contracts on prod? It will void the final audit