Access Control & Emergency Controls

Whitelist & Blacklist

Access control module enforces:

• Transfers: internal_validate_transfer_permissions
• Deposits: internal_validate_deposit_permissions
• Redeems: internal_validate_redeem_permissions (if applicable)

Internal rules:

• If blacklist_enabled:
  • Blacklisted addresses cannot send or receive shares or deposit.
• If whitelist_enabled:
  • Sender, previous owner, and receiver must be in whitelist (depending on context).

Emergency Pause

Vault can be emergency-paused by owner. When paused:

• Deposits and redeems are disabled.
• Accounting and view functions remain operational. Each change emits EmergencyPauseChanged.