fix(multicall): resolve critical multicall parsing corruption issues

- Added comprehensive bounds checking to prevent buffer overruns in multicall parsing
- Implemented graduated validation system (Strict/Moderate/Permissive) to reduce false positives
- Added LRU caching system for address validation with 10-minute TTL
- Enhanced ABI decoder with missing Universal Router and Arbitrum-specific DEX signatures
- Fixed duplicate function declarations and import conflicts across multiple files
- Added error recovery mechanisms with multiple fallback strategies
- Updated tests to handle new validation behavior for suspicious addresses
- Fixed parser test expectations for improved validation system
- Applied gofmt formatting fixes to ensure code style compliance
- Fixed mutex copying issues in monitoring package by introducing MetricsSnapshot
- Resolved critical security vulnerabilities in heuristic address extraction
- Progress: Updated TODO audit from 10% to 35% complete

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

pkg/scanner/analysis/pool_analyzer.go

@@ -7,9 +7,11 @@ import (
 	"time"
 
 	"github.com/ethereum/go-ethereum/common"
+
 	"github.com/fraktal/mev-beta/internal/logger"
 	"github.com/fraktal/mev-beta/pkg/events"
 	"github.com/fraktal/mev-beta/pkg/marketdata"
+	scannercommon "github.com/fraktal/mev-beta/pkg/scanner/common"
 	"github.com/fraktal/mev-beta/pkg/scanner/market"
 )
 
@@ -142,48 +144,18 @@ func (l *LiquidityAnalyzer) calculateLiquidityUSDValues(liquidityData *marketdat
 
 // getTokenPriceUSD gets the USD price of a token using various price sources
 func (l *LiquidityAnalyzer) getTokenPriceUSD(tokenAddr common.Address) float64 {
-	// Known token prices (in a production system, this would query price oracles)
-	knownPrices := map[common.Address]float64{
-		common.HexToAddress("0x82af49447d8a07e3bd95bd0d56f35241523fbab1"): 2000.0,  // WETH
-		common.HexToAddress("0xaf88d065e77c8cc2239327c5edb3a432268e5831"): 1.0,     // USDC
-		common.HexToAddress("0xff970a61a04b1ca14834a43f5de4533ebddb5cc8"): 1.0,     // USDC.e
-		common.HexToAddress("0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9"): 1.0,     // USDT
-		common.HexToAddress("0x2f2a2543b76a4166549f7aab2e75bef0aefc5b0f"): 43000.0, // WBTC
-		common.HexToAddress("0x912ce59144191c1204e64559fe8253a0e49e6548"): 0.75,    // ARB
-		common.HexToAddress("0xfc5a1a6eb076a2c7ad06ed22c90d7e710e35ad0a"): 45.0,    // GMX
-		common.HexToAddress("0xf97f4df75117a78c1a5a0dbb814af92458539fb4"): 12.0,    // LINK
-		common.HexToAddress("0xfa7f8980b0f1e64a2062791cc3b0871572f1f7f0"): 8.0,     // UNI
-		common.HexToAddress("0xba5ddd1f9d7f570dc94a51479a000e3bce967196"): 85.0,    // AAVE
-	}
-
-	if price, exists := knownPrices[tokenAddr]; exists {
+	if price, exists := scannercommon.GetTokenPriceUSD(tokenAddr); exists {
 		return price
 	}
-
 	// For unknown tokens, return 0 (in production, would query price oracle or DEX)
 	return 0.0
 }
 
 // getTokenDecimals returns the decimal places for a token
 func (l *LiquidityAnalyzer) getTokenDecimals(tokenAddr common.Address) uint8 {
-	// Known token decimals
-	knownDecimals := map[common.Address]uint8{
-		common.HexToAddress("0x82af49447d8a07e3bd95bd0d56f35241523fbab1"): 18, // WETH
-		common.HexToAddress("0xaf88d065e77c8cc2239327c5edb3a432268e5831"): 6,  // USDC
-		common.HexToAddress("0xff970a61a04b1ca14834a43f5de4533ebddb5cc8"): 6,  // USDC.e
-		common.HexToAddress("0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9"): 6,  // USDT
-		common.HexToAddress("0x2f2a2543b76a4166549f7aab2e75bef0aefc5b0f"): 8,  // WBTC
-		common.HexToAddress("0x912ce59144191c1204e64559fe8253a0e49e6548"): 18, // ARB
-		common.HexToAddress("0xfc5a1a6eb076a2c7ad06ed22c90d7e710e35ad0a"): 18, // GMX
-		common.HexToAddress("0xf97f4df75117a78c1a5a0dbb814af92458539fb4"): 18, // LINK
-		common.HexToAddress("0xfa7f8980b0f1e64a2062791cc3b0871572f1f7f0"): 18, // UNI
-		common.HexToAddress("0xba5ddd1f9d7f570dc94a51479a000e3bce967196"): 18, // AAVE
-	}
-
-	if decimals, exists := knownDecimals[tokenAddr]; exists {
+	if decimals, exists := scannercommon.GetTokenDecimals(tokenAddr); exists {
 		return decimals
 	}
-
 	// Default to 18 for unknown tokens
 	return 18
 }