Feat: Add recipient fee by basis points

[ogarciarevett]

Issue: Fix latest audit session issues in the RewardsNative contract + Add the new split payment functionallity to the PaymentRouterNative

🐵 Description

• Removed multisig wallet functionality in favor of direct fee recipient management
• Simplified fee recipient logic by removing strict 100% requirement during individual operations
• Added validation to ensure 100% fee distribution only during payment execution
• Updated emergency withdrawal to send funds to admin caller instead of multisig
• Added comprehensive test suite for fee recipient management

🙊 Checklist:

• I have added tests proving my fix is effective or that my feature works
• Contract deployed to testnet(only for new contracts)

[octane-security-app]

Summary by Octane

New Contracts

No new contracts were added in this PR.

Updated Contracts

• PaymentRouterNative.sol: The contract now includes customizable fee recipients, allowing distributed payments, replaces the multisig wallet handling mechanism, and introduces relevant events and errors.
• Rewards.sol: Changed loop variable type from uint to uint256 for consistency and clarity.
• RewardsNative.sol: The modifications remove whitelist signature verification and related functions, streamline initialization checks, and maintain reward management.

---

🔗 Commit Hash: 7797a99

[openzeppelin-code]

Feat: Add recipient fee by basis points

Generated at commit: 7797a996e44f2af7467bb510e74a3df31a48634a

🚨 Report Summary

	Severity Level	Results
Contracts	Critical High Medium Low Note Total	2 4 0 11 41 58
Dependencies	Critical High Medium Low Note Total	1 0 0 0 0 1

---

For more details view the full report in OpenZeppelin Code Inspector

[vasinl124]

lgtm

[octane-security-app]

Overview

Vulnerabilities found:	8
Severity breakdown:	5 Medium, 3 Low

Detailed findings

contracts/libraries/Address.sol

• Review potential External Calls issue that is exposed in the functionStaticCall function

contracts/payments/PaymentRouterNative.sol

• Review potential Centralization Risk issue that is exposed in the withdrawStuckFunds function
• Review potential Denial of Service issue that is exposed in the setFeeRecipient function
• Review potential Denial of Service issue that is exposed in the pay function
• Review potential Denial of Service issue that is exposed in the getFeeRecipients function

contracts/soulbounds/RewardsNative.sol

• Review potential Denial of Service issue that is exposed in the getTokenDetails function
• Review potential Ether or Token Leaking issue that is exposed in the createMultipleTokensAndDepositRewards function
• Review potential Missing/Improper Check on the Admin Address issue that is exposed in the constructor function

---

🔗 Commit Hash: 7797a99
🛡️ Octane Dashboard: All vulnerabilities