DripFactory, DripGovernor, and TwapOracle each have a pause()/unpause()/is_paused() triple gating their sensitive operations during an incident. TokenVault (contracts/token-vault/src/lib.rs) has none — deposit, withdraw, and set_limit all run unconditionally regardless of any emergency state. Given TokenVault holds user token balances directly (like DripStream, arguably the highest-value target of the four), the absence of any halt mechanism is a notable gap relative to the pattern the rest of the workspace has converged on.
DripFactory,DripGovernor, andTwapOracleeach have apause()/unpause()/is_paused()triple gating their sensitive operations during an incident.TokenVault(contracts/token-vault/src/lib.rs) has none —deposit,withdraw, andset_limitall run unconditionally regardless of any emergency state. GivenTokenVaultholds user token balances directly (likeDripStream, arguably the highest-value target of the four), the absence of any halt mechanism is a notable gap relative to the pattern the rest of the workspace has converged on.