Merge branch 'main' into feat/horizon-rwa-deployment

Author: avniculae

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @The-3D @yan-man @miguelmtzinf @avniculae @DhairyaSethi @CheyenneAtapour @CanonicalJP

README.md

@@ -95,6 +95,13 @@ In addition, Enigma Dark has adapted the Foundry-based fuzzing [invariant suite]
 
 <br>
 
+**-> Horizon Aave v3.3 - July 2025**
+
+- [Certora](./audits/2025-05-30_Certora_Horizon-v3.3.0.pdf)
+- [StErMi](./audits/2025-06-25_StErMi_Horizon-v3.3.0.pdf)
+
+<br>
+
 ### Bug bounty
 
 This repository will be subjected to [this bug bounty](https://immunefi.com/bounty/aave/) once the Aave Governance upgrades the smart contracts in the applicable production instances.

audits/2025-05-30_Certora_Horizon-v3.3.0.pdf

@@ -297,15 +297,15 @@ contract ATokenTransferTests is TestnetProcedures {
   ) public {
     uint256 aliceBalance = IERC20(aToken).balanceOf(alice);
     vm.assume(amount <= aliceBalance);
-    vm.assume(timePassed > 0);
+    timePassed = uint64(bound(timePassed, 1, type(uint64).max - vm.getBlockTimestamp() - 1));
     address mockReceiver = vm.addr(42);
 
     // borrow all available usdx
     vm.prank(carol);
     contracts.poolProxy.borrow(tokenList.usdx, 200_000e6, 2, 0, carol);
 
     // wait to inflate the index
-    vm.warp(block.timestamp + timePassed);
+    vm.warp(vm.getBlockTimestamp() + timePassed);
     // transfer the usdx
     vm.prank(alice);
     aToken.transfer(mockReceiver, amount);