No value-bearing deployment should be treated as ready on the strength of repository tests alone. Vault share accounting, market-integration callbacks, emission transitions, referral clipping, and every role handoff need independent review.
Fixed WEED supply with three exact genesis allocations and no later mint function.
Separate base-farming and referral budgets with cumulative caps.
After correct asset initialization, unrelated-token recovery rejects the address stored as budgetAsset; the missing WEED identity binding remains a launch blocker.
SafeERC20 transfers, reentrancy guards, and actual-receipt accounting on core asset paths.
Bounded deposit fee, harvest interval, referral rates, and vault slippage.
WeedChef principal withdrawal and emergency withdrawal remain callable while reward accrual is paused. Eligible position unstake and withdrawal remain separate from the reward-pause control. Greenhouse and Garden principal exits are not blocked by their new-stake pause.
WeedSwap depends on external tokens, Robinhood Chain, RPC providers, and supported Pons market infrastructure. A correct WeedSwap contract cannot prevent loss caused by market movement, a malicious token, an external integration failure, or a compromised user wallet.