chore: upgrade cow-sdk 7.3.4 -> 9.2.7 - #3101
No issues found — 0 findings
0 findings
No security vulnerabilities identified in this PR. The changes are a straightforward dependency upgrade of CoW Protocol SDK packages (cow-sdk 7.3.4 → 9.2.7, sdk-ethers-v5-adapter 0.3.5 → 0.4.11, sdk-flash-loans 1.7.4 → 3.3.4) with corresponding API adaptations: OrderParameters renamed to UnsignedOrder, flash loan parameters simplified from {sellAmount, buyAmount} to {flashLoanAmount}, chain enum updates (LENS removed, SOLANA added with empty/disabled addresses), and rate calculation logic simplified. The removal of ipfs-only-hash and its transitive dependencies (protobufjs, rabin-wasm, etc.) reduces the overall attack surface, which is a positive security change. The newly added SupportedChainId.SOLANA is not included in CoWProtocolSupportedNetworks and has empty adapter addresses, so it remains effectively disabled.