Add spearbit audit report of 2026-05-13

[claude]

Requested by Mathis GD · Slack thread

Adds the finalized Spearbit report of the review at tag 2026-05-13 (commit 8de7076).

---

Generated by Claude Code

[chatgpt-codex-connector]

💡 Codex Review

midnight/audits/2026-05-13-spearbit.pdf

Line 1 in 8b9a6ca

%PDF-1.5

Include the advertised withdrawal-grief reproducer

Section 5.1.2 tells readers to run forge test --match-path test/WithdrawableGriefTest.sol -vvv, but a repo-wide search confirms that this test file and an equivalent withdrawal-drain regression test are absent from the checkout; the command therefore cannot reproduce the finding as instructed. Add the embedded test to test/, or explicitly tell readers to create that file from the PDF snippet before running the command.

AGENTS.md reference: AGENTS.md:L77-L77

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".