bcnmy · filmakarov · Feb 20, 2026 · Nov 27, 2025 · Dec 1, 2025 · Dec 1, 2025
diff --git a/.github/workflows/foundry-test.yml b/.github/workflows/foundry-test.yml
@@ -22,7 +22,7 @@ jobs:
     - name: Install Foundry
       uses: foundry-rs/foundry-toolchain@v1
       with:
-        version: stable
+        version: nightly
 
     - name: Setup pnpm
       uses: pnpm/action-setup@v3
@@ -39,7 +39,7 @@ jobs:
       run: pnpm install --frozen-lockfile
 
     - name: Run Forge tests
-      run: export FOUNDRY_PROFILE="via-ir" && pnpm test
+      run: pnpm test
       env:
         FOUNDRY_PROFILE: ci
         RPC_84532: https://sepolia.base.org

diff --git a/.gitignore b/.gitignore
@@ -9,6 +9,7 @@ temp
 
 # dependencies
 node_modules/
+.pnpm-store/
 /lib/
 
 # env
@@ -49,3 +50,5 @@ script/deploy/deploy-logs/precalc/*.log
 !script/deploy/deploy-logs/build/.gitkeep
 !script/deploy/deploy-logs/precalc/.gitkeep
 
+# Debug scripts
+script/debug
diff --git a/.npmrc b/.npmrc
@@ -1 +1,2 @@
-node-linker=hoisted
+node-linker=hoisted
+store-dir=~/.pnpm-store
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,4 +1,4 @@
-# @biconomy/mee-contracts
+event Module# @biconomy/mee-contracts
 
 ## 1.1.0
 - MEE K1 Validator 1.1.0

diff --git a/README.md b/README.md
@@ -121,4 +121,5 @@ $ pnpm test
 ```
 
 ### Deployments
-See [`script/deploy/README.MD`](script/deploy/README.MD) to learn how to deploy the stx contracts to your chain.
+- Open any of the `deploy/vx.x.x` baranches
+- Read `script/deploy/README.MD` to learn how to deploy the stx contracts to your chain.
diff --git a/audit/2025-11-26-Pashov-security-review.pdf b/audit/2025-11-26-Pashov-security-review.pdf
diff --git a/contracts/composability/ComposableExecutionLib.sol b/contracts/composability/ComposableExecutionLib.sol
@@ -22,6 +22,7 @@ library ComposableExecutionLib {
     error InvalidOutputParamFetcherType();
     error InvalidConstraintType();
     error InvalidSetOfInputParams(string message);
+    error ComposableExecutionFailed();
 
     // Process the input parameters and return the composed calldata
     function processInputs(

diff --git a/contracts/composability/ComposableStorage.sol b/contracts/composability/ComposableStorage.sol
@@ -80,7 +80,7 @@ contract ComposableStorage {
     function getNamespace(address account, address _caller) public pure returns (bytes32 result) {
         assembly {
             mstore(0x00, account)
-            mstore(0x14, _caller)
+            mstore(0x20, shl(96, _caller))
             result := keccak256(0x0c, 0x28)
         }
     }

diff --git a/contracts/interfaces/nexus/INexusEventsAndErrors.sol b/contracts/interfaces/nexus/INexusEventsAndErrors.sol
@@ -47,4 +47,14 @@ interface INexusEventsAndErrors {
 
     /// @notice Error thrown when the provided signature is invalid.
     error InvalidSignature();
+
+    /// @notice Thrown when there is an attempt to remove the last validator.
+    error CanNotRemoveLastValidator();
+
+    /// @notice Error thrown when the `r` component of the PREP signature restores as invalid.
+    error InvalidPREP();
+
+    /// @notice Event emitted when a PREP is initialized.
+    /// @param r The `r` component of the PREP signature.
+    event PREPInitialized(bytes32 r);
 }
diff --git a/contracts/interfaces/nexus/base/IModuleManagerEventsAndErrors.sol b/contracts/interfaces/nexus/base/IModuleManagerEventsAndErrors.sol
@@ -93,4 +93,13 @@ interface IModuleManagerEventsAndErrors {
 
     /// @notice Error thrown when the default validator is already installed.
     error DefaultValidatorAlreadyInstalled();
+
+    /// @notice Error thrown when the validator is not installed.
+    error ValidatorNotInstalled();
+
+    /// @notice Error thrown when the enable mode signature is invalid.
+    error EnableModeSigError();
+
+    /// @notice Error thrown when a fallback handler is not installed for a given selector.
+    error MissingFallbackHandler(bytes4 selector);
 }
diff --git a/contracts/lib/stx-validator/HashLib.sol b/contracts/lib/stx-validator/HashLib.sol
@@ -56,13 +56,13 @@ library HashLib {
             itemIndex := calldataload(add(packedSignatureData.offset, 0x20))
             let u := calldataload(add(packedSignatureData.offset, 0x40)) // local offset of the array of hashes
             let s := add(packedSignatureData.offset, u) // global offset of the array of hashes
-            itemHashes.offset := add(s, 0x20) // account for 20 bytes length
+            itemHashes.offset := add(s, 0x20) // account for 32 bytes length
             itemHashes.length := calldataload(s) // get the length
             u := calldataload(add(packedSignatureData.offset, sub(STATIC_HEAD_LENGTH, 0x20))) // load local offset of
             // the
             // signature
             s := add(packedSignatureData.offset, u) // global offset of the signature
-            signature.offset := add(s, 0x20) // account for 20 bytes length
+            signature.offset := add(s, 0x20) // account for 32 bytes length
             signature.length := calldataload(s) // get the length
         }
     }

diff --git a/...ts/lib/stx-validator/MEEUserOpHashLib.sol → ...ts/lib/stx-validator/MeeUserOpHashLib.sol b/...ts/lib/stx-validator/MEEUserOpHashLib.sol → ...ts/lib/stx-validator/MeeUserOpHashLib.sol
diff --git a/contracts/lib/util/EcdsaHelperLib.sol b/contracts/lib/util/EcdsaHelperLib.sol
@@ -57,6 +57,8 @@ library EcdsaHelperLib {
             mstore(add(ptr, 0x02), domainSeparator)
             mstore(add(ptr, 0x22), structHash)
             digest := keccak256(ptr, 0x42)
+            // restore free memory ptr
+            mstore(0x40, add(ptr, 0x42))
         }
     }
 }
diff --git a/contracts/nexus/Nexus.sol b/contracts/nexus/Nexus.sol
@@ -363,6 +363,8 @@ contract Nexus is INexus, BaseAccount, ExecutionHelper, ModuleManager, UUPSUpgra
                     let ptr := mload(0x40)
                     calldatacopy(ptr, initData.offset, initData.length)
                     initDataHash := keccak256(ptr, initData.length)
+                    // restore free memory ptr
+                    mstore(0x40, add(ptr, initData.length))
                 }
                 // Make sure the account has not been already initialized
                 // Means relay can not re-initialize the account

diff --git a/contracts/nexus/base/ModuleManager.sol b/contracts/nexus/base/ModuleManager.sol
@@ -732,6 +732,8 @@ abstract contract ModuleManager is Storage, EIP712, IModuleManager {
 
             // Hash the entire struct
             structHash := keccak256(ptr, 0xa0)
+            // restore free memory ptr
+            mstore(0x40, add(add(ptr, 0xa0), initData.length))
         }
         return structHash;
     }

diff --git a/contracts/node-pm/NodePaymasterFactory.sol b/contracts/node-pm/NodePaymasterFactory.sol
@@ -101,6 +101,8 @@ contract NodePaymasterFactory {
             mstore(add(ptr, 0x15), index)
             mstore(add(ptr, 0x35), initCodeHash)
             predictedAddress := keccak256(ptr, 0x55)
+            // restore free memory ptr
+            mstore(0x40, add(ptr, 0x55))
         }
         /// forge-lint:disable-next-line(unsafe-typecast)
         return payable(address(uint160(predictedAddress)));

diff --git a/foundry.toml b/foundry.toml
@@ -132,9 +132,6 @@
   worldchain = { key = "${ETHERSCAN_API_KEY}", url = "https://api.etherscan.io/api", chain = "480"}
   worldchain-sepolia = { key = "${ETHERSCAN_API_KEY}", url = "https://api.etherscan.io/api", chain = "4801"}
 
-  # FLUENT
-  # fluent-testnet = { key = "", url = "", chain = "20994"}
-
   # MONAD
   # monad = { key = "", url = "", chain = "143"}
   monad-testnet = { key = "${ETHERSCAN_API_KEY}", url = "https://api.etherscan.io/api", chain = "10143"}

diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "stx-contracts",
-  "version": "2.2.0",
+  "version": "3.0.0",
   "description": "Smart contracts that enable supertransactions on Biconomy's modular execution environment.",
   "repository": "github:bcnmy/stx-contracts",
   "author": {
@@ -39,7 +39,7 @@
   "dependencies": {
     "account-abstraction": "eth-infinitism/account-abstraction#v0.7.0",
     "@erc7579/enumerablemap4337": "erc7579/enumerablemap",
-    "@erc7579/implementation": "erc7579/erc7579-implementation#v0.0.2",
+    "@erc7579/implementation": "github:erc7579/erc7579-implementation",
     "forge-std": "foundry-rs/forge-std#v1.11.0",
     "solady": "vectorized/solady#v0.1.26",
     "solidity-bytes-utils": "GNSPS/solidity-bytes-utils#v0.8.4",