docs: Chain 138 alignment audit + deprecate stale token-addresses master

- Add CHAIN138_ALIGNMENT_AUDIT_2026-04-18.md: drift report covering 67 unique
  Chain-138 addresses from 7 canonical sources, cross-checked against on-chain
  state at https://rpc-core.d-bis.org (chainId 0x8a / 138).
- Add docs/data/chain138-alignment.json: structured findings for downstream tooling.
- Banner CHAIN138_TOKEN_ADDRESSES.md as DEPRECATED (only 5 of 15+ tokens, 0 of 43
  infrastructure contracts).

Findings highlights:
- 64 of 67 referenced addresses are live on-chain; 3 ghosts (in allowlist only).
- 61 deployed contracts are missing from CHAIN138_TOKEN_ADDRESSES.md.
- WETH9 genesis slot (0xC02aaA39...Cc2) is a non-ERC20 shim (decimals=0); real
  WETH9 is at 0x3304b747...E6 per smom/docs/ADDRESS_MAPPING.md.
- WETH10 at canonical 0xf4BB2e28...A9F works (18 decimals, 'Wrapped Ether v10').
- 15 compliant fiat/metal tokens (cEURC, cGBPC, cAUDC, cJPYC, cCHFC, cCADC,
  cXAUC, cXAUT, cEURT, cGBPT, plus non-compliant-wrapper USDT/USDC) all live on-chain,
  all absent from CHAIN138_TOKEN_ADDRESSES.md.

Recommended follow-ups listed in the audit doc.
This commit is contained in:
Devin
2026-04-18 23:49:35 +00:00
parent bee1d29d55
commit becba35854
3 changed files with 2229 additions and 0 deletions

View File

@@ -1,3 +1,14 @@
> ⚠️ **DEPRECATED 2026-04-18** — this file documents only 5 of the 15+ ERC20 tokens and 0 of the 43 infrastructure contracts actually deployed on Chain 138. For the current source of truth see:
>
> - `smom-dbis-138/config/address-inventory.chain138.json` (43 infra contracts, last updated 2026-03-27)
> - `smom-dbis-138/config/runtime-env.chain138.json` (canonical runtime env surface, 2026-03-27)
> - `smom-dbis-138/services/token-aggregation/src/config/canonical-tokens.ts` (15 Chain-138 tokens)
> - `LedgerLive/docs/CHAIN138_ALIGNMENT_AUDIT_2026-04-18.md` (this repo — full drift report, generated from on-chain state + 7 canonical sources)
>
> The values below are still correct for the listed tokens, but the set is incomplete. Do not add new references against this file; use the inventory JSON instead.
---
# Token Contract Addresses - ChainID 138
**Last Updated:** 2026-01-31