Default documentation incorrectly states that every validator extraction path is frozen
The validatorDefaulted NatSpec, declareDefault, and holderRedeemBondOrDefault state that every validator extraction path is frozen during a default.
Description
The validatorDefaulted NatSpec, declareDefault, and holderRedeemBondOrDefault state that every validator extraction path is frozen during a default.
validatorRedeemBonds has no default check and deliberately remains callable. It lets the validator select bonds and pay their full maturity values from the pooled Coffer balance into the redemption escrow, including bonds the validator acquired through another address. The README later describes this exception correctly, so the executable behavior is consistent with the intended first-come-first-served settlement model, but the earlier NatSpec and README statements are false.
Holders and integrations relying on those statements may incorrectly assume that the validator cannot direct any Coffer balance while a default stands.
Recommendations
State consistently that every validator extraction path except validatorRedeemBonds is frozen during a default. Add the exception to the validatorDefaulted, declareDefault, and holderRedeemBondOrDefault NatSpec, and document on validatorRedeemBonds that it remains available as the settlement path and lets the validator choose which full-value claims the pooled balance settles first.
Mitigation
Fixed. Commit dc1c05f corrects the README, NatSpec and test comments to state that validatorRedeemBonds remains available during default as a settlement path into the pull-payment escrow.
Report provenance
Source: the corrected final report dated 22 October 2026. Final status and residual conditions are preserved in this write-up. Read the full report.