All programs
Helix Finance
LiveSEAL Safe Harborby Helix Labs
Overcollateralized lending markets with isolated risk pools.
LendingSolidityBESC HyperchainEthereumArbitrum
Max bounty
$1,000,000
Payment guarantee$1,500,000 reserve
Assets in scope
Only these assets are eligible. Each report selects exactly one.
| ID | Asset | Type | Target |
|---|---|---|---|
| HLX-1 | Pool (proxy) | Smart contractEthereum | 0x4c1f2E7e…9A8b7C6d |
| HLX-2 | Liquidator | Smart contractEthereum | 0x8A9b0C1d…4E5f6A7b |
| HLX-3 | App Frontend only; no backend in scope. | Website / app | https://app.helix.example |
| HLX-4 | Pool (Arbitrum) | Smart contractArbitrum | 0x4c1f2E7e…9A8b7C6d |
Out-of-scope & exclusions
Any out-of-scope closure must cite one of these ids.
- EXCL-1Attacks that the reporter has already exploited themselves, leading to damage.
- EXCL-2Attacks requiring access to leaked keys or credentials.
- EXCL-3Attacks requiring access to privileged addresses (governance, admin, guardian) except where the privilege is obtainable by an unprivileged attacker.
- EXCL-4Incorrect data supplied by third-party oracles (oracle manipulation and flash-loan attacks remain in scope).
- EXCL-5Basic economic governance attacks (e.g. 51% attacks).
- EXCL-6Lack of liquidity impacts and best-practice recommendations without demonstrated impact.
- EXCL-7Centralization risks acknowledged in the published audit reports.
- EXCL-8Issues in the frontend (HLX-3) that require the user to install a malicious browser extension.