v5.0.1

What's Changed

• Fix enter sub vaults exit queue by @tsudmi in #139

Full Changelog: v5.0.0...v5.0.1

v5.0.0

Changelog

v5.0.0

A major release introducing the NodesManager system, a redesigned meta-vault architecture with a dedicated SubVaultsRegistry, new ERC-20 meta-vault variants, and the EthCommunityVault.

Breaking Changes

• Meta-vault architecture restructured. The shared MetaVault base contract has been removed. EthMetaVault and GnoMetaVault were moved out of the custom/ directory and now live alongside other vault types. Sub-vault state is no longer managed inside VaultSubVaults — it lives in a new standalone SubVaultsRegistry deployed per meta-vault.
• GnoPrivMetaVault has been removed. Private meta-vaults are now Ethereum-only, alongside the new ERC-20 variants.
• SubVaultUtils library removed. Sub-vault logic was relocated to SubVaultsRegistry and the new ExitPositions library (renamed from SubVaultExits).
• OsToken immutables relocated. OsToken-related immutables moved out of VaultImmutables into VaultOsToken. OsToken configuration moved into VaultImmutables and redemption logic into VaultSubVaults.
• OsTokenRedeemer reworked to operate against SubVaultsRegistry and support meta-vaults. Position tracking and the redemption update flow have changed.
• Meta-vault factories are now permissionless.

New Features

• NodesManager: new component for delegating validator operations to node operators. Includes operator-state management with merkle proofs, oracle-signed validator registration, share donations, an exit queue, pending penalties, and minimum-balance checks. Supports delegation of the validators manager role and the withdrawals manager role. Introduces direct deposits in place of the old deposit queue.
• EthCommunityVault: new ERC-20 Ethereum vault with a locked NodesManager set as both fee recipient and validators manager. Emits EthCommunityVaultCreated on deployment.
• ERC-20 meta-vaults: EthErc20MetaVault, EthPrivErc20MetaVault, and EthPrivMetaVault are now available.
• SubVaultsRegistry & SubVaultsRegistryFactory: standalone registry contracts that own all sub-vault accounting (positions, exit queues, capacities) for a meta-vault. Upgrades remain gated by the parent meta-vault.
• Validator checker redemption support: ValidatorsChecker now factors redemption assets into its checks.
• Meta-vault state updates in OsTokenRedeemer: redeemer now triggers state updates as part of redemption.
• subVaultsExits view: new function for inspecting per-sub-vault exit state.
• getExitQueueCumulativeTickets view: exposes cumulative ticket counts on the exit queue.

Improvements

• BalancedCurator: simplified, and now respects each sub-vault's capacity when distributing deposits. Empty deposit lists are returned (instead of reverting) when no sub-vaults can accept funds. A new BalancedCurator has been deployed across all networks.
• Gas optimizations: reduced redundant memory operations in OsTokenRedeemer and SubVaultsRegistry; cached metaVault SLOAD before access checks in enterSubVaultsExitQueue; skipped redundant computation in getExitQueueMissingAssets when queuedShares is zero; harvest checks are now skipped for uncollateralized meta-vaults.
• Reentrancy hardening: nonReentrant added to SubVaultsRegistry and NodesManager.

Internal / Dev

• Pinned commit hashes for all GitHub Actions workflows.
• Renamed SubVaultExits library to ExitPositions.
• Updated and regenerated gas snapshots across the suite.
• Reworked upgrade scripts (UpgradeEthNetwork, UpgradeGnoNetwork) to deploy only meta-vaults and the OsToken redeemer where applicable.
• Deployment artifacts updated for mainnet, hoodi, and gnosis (including governor transaction batches).

Full Changelog: v4.0.1...v5.0.0
Audit: https://github.com/stakewise/v3-core/blob/v5.0.0/audits/2026-04-Statemind.pdf

v5.0.0d

What's Changed

• Deploy new BalancedCurator by @tsudmi in #137

Full Changelog: v5.0.0c...v5.0.0d

v5.0.0c

What's Changed

• Audit fixes by @tsudmi in #134

Full Changelog: v5.0.0b...v5.0.0c

v5.0.0b

What's Changed

• Add validators manager delegation to NodesManager by @tsudmi in #133

Full Changelog: v5.0.0a...v5.0.0b

v5.0.0a

What's Changed

• Add redemption assets to validators checker by @tsudmi in #129
• Fix code review issues for redemptions by @tsudmi in #130
• Refactor meta vault by @tsudmi in #131
• Nodes manager by @tsudmi in #132

Full Changelog: v4.0.1...v5.0.0a

v4.0.1

What's Changed

• Fix validators checker by @tsudmi in #128

Full Changelog: v4.0.0...v4.0.1

v4.0.0

What's Changed

Base

1. Extracted the EIP-712 domain separator calculation from the _computeDomainSeparator function in the ERC20Upgradeable contract into the EIP712Utils library to reduce the size of the vault contract.
2. Switched from Uniswap inspired Multicall implementation to OpenZeppelin Address.functionDelegateCall

Curators

1. Added the BalancedCurator contract for the MetaVault. This contract calculates the amounts to deposit or withdraw from the sub-vaults, evenly distributing and allocating assets among them. The MetaVault should set this contract as its curator to apply the even distribution logic.
2. Added the CuratorsRegistry contract, which keeps track of all registered curator contracts. Any new curator contract must be listed there to be used with the MetaVault.

Removed contracts

1. Removed the CumulativeMerkleDrop contract, as it is not currently in use.
2. Removed all restake functionality from the vaults, as it is not currently in use.
3. Removed the XDaiExchange contract, as it has been replaced by the TokensConverter contract.

Vaults

1. Extracted all constructor arguments for the vault implementation contracts into structs (e.g., EthErc20VaultConstructorArgs) to avoid 'stack too deep' errors during compilation.
2. Added the setAdmin function to change the admin address of the vault. It can only be called by the current admin and emits an AdminUpdated event.
3. Added the donateAssets function to the vault, allowing anyone to donate ETH/GNO. It can be used to distribute or refund extra ETH/GNO rewards to the vault and emits an AssetsDonated event.
4. Added the setFeePercent function to update the vault's current fee. It can only be called by the vault admin. The fee can be updated once every 3 days and may only be increased by up to 20% at a time. If the initial fee is 0%, the first increase is limited to 1%.
5. Replaced the queuedShares and totalExitingAssets functions with getExitQueueData, which returns all queuing data for the vault. This change reduces the vault contract's bytecode size.
6. The minimum withdrawal delay for private vaults has been removed. For all other vaults, it has been reduced from 24 hours to 15 hours.
7. Added the fundValidators function to top up existing validators with ETH/GNO. It can only be called by an address with the validatorsManager role or by providing a valid validatorsManager signature. Top-ups are allowed only for validators that have been previously consolidated to a 0x02 validator or registered as a 0x02 validator. Emits a ValidatorFunded event.
8. Added the consolidateValidators function for migrating 0x01 validators to 0x02 validators. It can only be called by an address with the validatorsManager role or by providing a valid validatorsManager signature. If the consolidation targets a validator that was not previously consolidated or registered with a 0x02 withdrawal prefix, oracle signatures must be provided. These signatures are verified using the new ConsolidationsChecker contract. ETH/xDAI must be sent along with the call to cover the consolidation fee, and any unused amount is refunded to the caller. Emits the ValidatorConsolidationSubmitted event. Note: a successful function call does not guarantee successful consolidation at the consensus level.
9. Added the withdrawValidators function to trigger withdrawals from validators. It can only be called by an address with the validatorsManager role or by providing a valid validatorsManager signature. ETH/xDAI must be sent with the call to cover the withdrawal fee, and any unused amount is refunded to the caller. Emits the ValidatorWithdrawalSubmitted event. Note: a successful function call does not guarantee a successful withdrawal at the consensus level.
10. Modified the registerValidators function to support registration of both 0x01 and 0x02 validators. It can only be called by an address with the validatorsManager role or by providing a valid validatorsManager signature. When registering a 0x02 validator, the amount in Gwei must be specified for each validator. Registration of a 0x01 validator emits a ValidatorRegistered event, while registration of a 0x02 validator emits a V2ValidatorRegistered event.
11. Removed the swapXdaiToGno function and deprecated the XdaiSwapped event. During GnoVault initialization, a TokensConverter contract is created. Once GnoVault pulls accumulated xDAI from OwnMevEscrow or SharedMevEscrow, it transfers it to the TokensConverter, converts it to sDAI, and uses CowSwap to swap it for GNO. In updateState, all converted GNO is pulled back into the vault from the TokensConverter and accounted for using the donateAssets function.
12. Migrated the exit queue for GnoVaults from the exitingAssets to the ExitQueue library, similar to the implementation used in ETH vaults.
13. Extracted the calculateReceivedAssets function, used for calculating OsToken liquidation and redemption assets, into a separate OsTokenUtils library to reduce the vault contract's bytecode size.
14. A new rescueAssets function was added. It can only be called by the vault admin when no validators have been created. This function allows the admin, who has just created the vault, to withdraw an incorrectly created validator whose withdrawal credentials are set to the vault, but whose deposit was made directly to the Beacon chain contract instead of through the vault contract. The function is disabled once the first validator is created using the vault.

Genesis Vault

1. Deprecated the GenesisVaultCreated event, as it will no longer be emitted. Only one instance of the genesis vault exists, and it has already been created.
2. Removed the acceptPoolEscrowOwnership function, as ownership of the PoolEscrow has already been transferred and the function will not be called in the future.
3. Removed rewards splitting with the legacy rETH2 contract.

Meta Vault

Added a new type of vault called MetaVaults. Unlike other vaults, MetaVaults do not register validators directly - instead, they delegate accumulated assets to sub-vaults, which are managed by the vault admin. Each sub-vault must have at least one registered validator, and up to 50 sub-vaults can be added to a MetaVault.

When a sub-vault is removed, all assets allocated to it enter the exit queue. Once the assets exit successfully, they are returned to the MetaVault, and the sub-vault is removed from the list.

Calling the depositToSubVaults function deposits all available assets from the MetaVault into the sub-vaults. The deposit and withdrawal amounts for each sub-vault are determined by the Curator contract, which can be changed by the admin using the setSubVaultsCurator function. By default, the BalancedCurator is used to evenly distribute and withdraw assets across sub-vaults.

In the updateState function, the locked amounts in all sub-vaults are synchronized, and the reward delta is calculated. Before calling updateState on the MetaVault, all sub-vaults must be up-to-date (i.e., updateState must be called on each sub-vault first). During the MetaVault's updateState, assets queued for exit are submitted to the sub-vaults. The curator contract determines the amount to withdraw from each sub-vault.

If a sub-vault is in the process of being removed, the exiting assets will be prioritized to process its exit queue before submitting new exit requests to other sub-vaults. All exit requests to sub-vaults must be claimed using the claimSubVaultsExitedAssets function before calling updateState on the MetaVault.

MetaVaults can be deployed using the EthMetaVaultFactory contract, and currently, only the factory owner is permitted to deploy new MetaVaults.

Reward Splitter

1. Added a claimer role that can trigger exits on behalf of splitter shareholders using the enterExitQueueOnBehalf function. The claimer is managed by the vault admin via the setClaimer function.
2. Added the claimExitedAssetsOnBehalf function, which can be called by anyone to withdraw exited assets to the respective shareholder.
3. Replaced the owner of the RewardSplitter with the admin of the vault.
4. Added the enterExitQueueOnBehalf function, allowing anyone to enter the exit queue on behalf of a shareholder.

OsToken Redeemer

The new OsTokenRedeemer contract was introduced to enable OsToken redemptions. This contract is set as the redeemer in OsTokenConfig and can call redeemOsToken in the vault.

OsToken holders can enter the exit queue by locking their OsTokens in the OsTokenRedeemer contract and receiving an exit queue ticket. Once their OsTokens are redeemed for assets (ETH/GNO), they can claim them from the OsTokenRedeemer contract. The process is the same as unstaking ETH/GNO from the vault.

The exit queue is processed as follows:

1. Collecting positions: The PositionsManager collects redeemable positions from the vaults. These are stakers in the vaults who have minted and sold their OsTokens, or whose LTV is approaching the liquidation threshold. Once all positions are collected, the manager proposes a new root and IPFS hash using proposeRedeemablePositions.
2. Review by the redemptions committee: The redemptions committee reviews the proposed redeemable positions. If everything is correct, they approve it by calling acceptRedeemablePositions. They can also reject the proposal by calling denyRedeemablePositions.
3. Executing redemptions: Once the new root has been approved, the queued OsTokens can be redeemed from the vaults using redeemOsTokenPositions. This function verifies that the position is included in the approved root, burns the OsTokens in the vault, and claims the corresponding assets. The vault must have enough unbonded assets (ETH/GNO) for the redem...

v3.0.1

What's Changed

Fix a corner case in the exit queue index calculation (SWIP-28) in #100

Full Changelog: v3.0.0...v3.0.1

v3.0.0

What's Changed

1. Added the EthOsTokenVaultEscrow and GnoOsTokenVaultEscrow contracts. These contracts allow users to request an exit for staked ETH/GNO without immediately burning osETH/osGNO. This feature supports certain DeFi integrations by enabling users to 1) request an exit from the vault without burning osETH/osGNO, and 2) once the unstaked ETH/GNO is ready to be claimed, burn osETH/osGNO and receive the unstaked ETH/GNO in a single transaction.
2. Added OsTokenFlashLoans. This contract allows to mint and burn osETH in single transaction (up to 100k osETH). For example, leverage strategy uses OsTokenFlashLoans to mint osETH, supply to Aave, borrow ETH, mint osETH from the vault and return the flashloan.
3. When user migrates from StakeWise Legacy, we always mint max amount of osTokens to the user in the Genesis Vault.
4. Move back to the exit queue processing implemented in V1 vaults
5. The enterExitQueue function will return max UINT256 as position ticket in case the vault has no validators and assets vault can be redeemed.
6. The max possible osToken shares can be minted if max UINT256 is passed to the mintOsToken. If no osToken shares can be minted, 0 will be returned.

Audit report

The audit was performed by Sigma Prime and is available here.

New Contributors

• @CJ42 made their first contribution in #98

Full Changelog: v2.0.1...v3.0.0