Acme Lend drill 2026-11-09

Acme Lend: our deliberately vulnerable fixtureOpenround 0light-client confirmed

Acme Lend is our deliberately vulnerable fixture: a fictional lending protocol whose planted bugs are textbook classes, labelled in its code. Nothing here is a finding in a real protocol, and wNEAR on testnet has no value.

Overview

The program as near-antibody stores it. Its manifest hash commits the anchor, the targets, the rules and the terms; once it is open, the deployment's owner can change nothing it depends on.

Project: acme.antibody.testnet, account: acme.antibody.testnet · our fixture project
Description: An automated daily drill on a fresh Acme Lend instance (DELIBERATELY VULNERABLE TEST FIXTURE): the one moment, run again.
as written in the committed manifest
Program key: bounty.antibody.testnet/15, program key: bounty.antibody.testnet/15
Phase: Open round 0this round since 2026-11-09 03:23:00 UTC
Created: 2026-11-09 03:22:13 UTCHbRxz1zD…, NEAR transaction: HbRxz1zDEV7DWvRqGuZYzuVzRTgnDMqLExVxn9bX7DZy, opens an explorer in a new tab
Opened: 2026-11-09 03:23:00 UTC4EC1CJbx…, NEAR transaction: 4EC1CJbxcRDE3nbbStko2kSXc4K2PZrYH6kSz7Ayvfyu, opens an explorer in a new tab
Terms sha256: 3a9c40175b7ae46a…, terms sha256: 3a9c40175b7ae46a342566111ba65ca4a420c8ff2289eb7b08c8759b5125a34d
Manifest sha256: 37c11f590e58889c…, manifest sha256: 37c11f590e58889cc703034603d51d45db0c1fb14aa90021fcfe45e8fa35e5fcUploaded in NEAR transaction A1uNzD8TPw…, NEAR transaction: A1uNzD8TPwtYKXRWzfS8rCDiKQW8ayJPJD889yeVkEbW, opens an explorer in a new tab by acme.antibody.testnet
Sealing key: e39b7eba14a8b026…, sealing public key: e39b7eba14a8b026476722b0f898c993beb4f38fd1eaaf3ea2fe24930600fc1dProofs are sealed to it. It counts only once its activation run (run 220) is attested on NEAR: 7euj22wu…, NEAR transaction: 7euj22wuVB65MRtT33jTefwcwkatiSxcQRoRdMTqj9DD, opens an explorer in a new tab

Its record

At stake: 0.3wNEAR available now
Verified attempts: 1
Paid findings: 1
First claim: 46 safter it opened
Claimed in the first hour: 25%of the escrow
Open for: 13.8 h

view bounty.antibody.testnet.get_program({"program_id":15})

Holds if: the manifest hash shown here, as near-antibody stores it

antibody judge --program 15

The rules as code

Each rule is one bit of the program's invariants contract. After a proof's calls, at the anchor, the verifier runs its check(): a set bit is a broken rule, paid by its severity. The verifier never reads a report.

The program's rules
Rule	Severity	Payout	Budget per round	Source
solvencybit 0an attested proof pauses Lender claims are covered at the committed reference price.	Critical	0.1 wNEAR	0.4 wNEAR	AcmeInvariants, line 13 (the source of solvency, opens the repository)
fees_to_treasurybit 1 Accrued fees plus the treasury balance never decrease.	High	0.03 wNEAR	0.4 wNEAR	AcmeInvariants, line 16 (the source of fees_to_treasury, opens the repository)
share_pricebit 2 The vault's share price never falls for the remaining holders.	Medium	0.01 wNEAR	0.4 wNEAR	AcmeInvariants, line 18 (the source of share_price, opens the repository)

The budget caps what one rule pays per round, so many entry points into one root cause cannot drain the escrow. A finding's key is the rule and the entry point that broke it (by default, the target and function): the first proof of each key is paid.

The targets (9) on Sepolia

The terms

Committed in the manifest with the rules, their text fixed by the terms sha256, and enforced by near-antibody: no person decides a payout.

Payouts

The payout table
Severity	Payout	Rules
Critical	0.1 wNEAR	solvency
High	0.03 wNEAR	fees_to_treasury
Medium	0.01 wNEAR	share_price
Low	none	none

Bond per commit: 0.001 wNEAR · refunded, or forfeited to this program's escrow when the proof breaks nothing
Instant payments: up to 0.1 wNEAR
When a payout is instant
Paid in seconds when the verdict is attested on NEAR, within 0.15 wNEAR per 1 h. Otherwise a payout waits the challenge window; above the cap it also needs an agreeing second run.
Challenge bond: 0.005 wNEAR
Protocol fee: none · pinned at 0 for this program
Release fee: none · pinned at 0 for this program
Verification deposit: 0.03 NEAR per run, paid by whoever asks for it; OutLayer refunds the unused part

The escrow against the largest payout

3×the largest payout

0.3 available / 0.1 wNEAR largest

The available escrow over the largest payout. Below 1× the status page raises an alert; a payout the escrow cannot cover is queued as debt, in commit order.

Pauses: An attested proof of solvency, on a light-client anchor, pauses the protocol on every chain the project registered (one pause ticket per round), with no minimum impact.
Known issues: At most 4, sealed before open, their base payouts at most 50% of the escrow.
Gap lane: A proof that breaks no rule but harms a declared protected account by more than $100 is refunded and recorded as a gap claim, with 0.01 wNEAR reserved. It is paid if a later round adds a rule its proof breaks.
Unevaluable: A proof the rules cannot evaluate (check() reverts or runs out of gas) is refunded.

The windows

The program's windows
Window	Length	What it bounds
Reveal	10 min	A commit is revealed within this, or it expires and its bond goes to the escrow.
Challenge window	60 s	A verdict that is not paid instantly is final after this; anyone may challenge it within it, with the challenge bond.
Resolve	5 min	A challenge with no attested result within this voids the verdict; both bonds are refunded.
Run timeout	4 min	A run that never answered is void after this.
Infrastructure grace	10 min	An infrastructure failure is retried this long, then the commit closes with a refund.
Round minimum	2 min	A round runs at least this long before the next one opens.
Re-run window	10 min	Re-runs at a proposed fix may be asked for within this of its confirmed check.
Disclosure delay	10 min	A paid proof becomes public at most this long after its claim.
Exit grace	60 s	After the deadline plus this, anyone may settle the program (exit).
Deadline	2026-11-09 15:06:09 UTC	No commit is accepted after it.

The anchor

Every proof runs on the state proven at one block. A pause ticket, and the verdict guard, act only on an anchor the light client confirmed: on a project-attested anchor a verdict is about state the project chose.

Chain: Sepolia (11155111)
Block: 12094722 (opens an explorer)
Hash: 0x2d16b753103396f77924ebae8d8a11fb505cfbd64d002c51b5671bb300424926
Its check: confirmed by the light clientnear-antibody compared the hash with client-eth2.sepolia.testnet when the program was created.anchor_checked (LightClient): HbRxz1zD…, NEAR transaction: HbRxz1zDEV7DWvRqGuZYzuVzRTgnDMqLExVxn9bX7DZy, opens an explorer in a new tab
Base witness: The anchor state the rules and the round-0 checks read, proven against the anchor and pinned at activation.72ff2bbe1d113643…, base witness sha256: 72ff2bbe1d113643132cdd41694d5b7cedb9647006909c4aed7b5e0cc94e7929Uploaded in NEAR transaction 4hsrR5EDnj…, NEAR transaction: 4hsrR5EDnjrEHu2XEazwk4oS4oKpPMuaCMnCue8LGHjp, opens an explorer in a new tab by acme.antibody.testnet

Check the hash yourself

view client-eth2.sepolia.testnet.block_hash_safe(12094722 as 8 little-endian bytes: 0x028db80000000000)

Expected: byte 0 is 1 (the client holds the block), then 32 bytes equal to the anchor hash.

The same check from a terminal, and the one that also hashes the block header from a Sepolia RPC:

antibody judge --program 15

antibody anchor-check --block 12094722

Known issues

Declared sealed before open; a later proof with the same tag is not paid again. Their count, rules and severities are public; their content stays sealed for good.

0 sealed

No known issue declared: every key this program prices was open to the first proof.

The chains

Per chain: the program's adapter, the proxies it may pause or upgrade, and every permit near-guardian asked the MPC network to sign, with the transaction that carried it there.

Permits are EIP-712 messages the MPC network signs under this program's own path; each adapter trusts only its address, 0x7efe22f3…ac7d, the program's guardian address: 0x7efe22f3b4365fc2af0d6ec7bd7d8f70a134ac7d. The adapter can pause and upgrade; it can never unpause.

Sepolia (11155111)

paused

Adapter: 0xa20e498c…d165, Sepolia adapter: 0xa20e498c50f0417510f76b3068812f8a8cf2d165, opens an explorer in a new tab
Proxies: AcmeLend0x87d79e6b…7331, AcmeLend on Sepolia: 0x87d79e6b404448ce7a5bb54ff5972e1b89777331, opens an explorer in a new tabAcmeVault0x8ca35393…d443, AcmeVault on Sepolia: 0x8ca353934be0b59447c74f567a5efd694d60d443, opens an explorer in a new tab

Permits on Sepolia
Permit	What it does	Status	Transaction
#24	Pause, for the ticket of commit 100round 0	confirmed on chain	0xdb577f72…, Sepolia transaction: 0xdb577f723cad6e06d9e9cf6ed52b6b141a06b484d20bc79b3c18bf54ec675a74, opens an explorer in a new tabrecorded run

Base Sepolia (84532)

paused

Adapter: 0xa20e498c…d165, Base Sepolia adapter: 0xa20e498c50f0417510f76b3068812f8a8cf2d165, opens an explorer in a new tab
Proxies: AcmeLend0x87d79e6b…7331, AcmeLend on Base Sepolia: 0x87d79e6b404448ce7a5bb54ff5972e1b89777331, opens an explorer in a new tabAcmeVault0x8ca35393…d443, AcmeVault on Base Sepolia: 0x8ca353934be0b59447c74f567a5efd694d60d443, opens an explorer in a new tab

antibody judge --program 15

The sealed feed

Every commit in order: who, when, the state, the verdict and the payout; never the proof. A proof stays sealed until disclosure, and the project reads only the proofs it pays for.

Zero-knowledge proofs: none yet

The sealed feed, in commit order
Commit	Who	When	State	Verdict	Keys	Payout
Commit 100#0 · round 0	agent-a.antibody.testnet, account: agent-a.antibody.testnet our fixture agent A	2026-11-09 03:23:12 UTCHogH3uBR…, NEAR transaction: HogH3uBRKiZCncgygFiK9ceqRsrXFFCJFQYKYNm5dWVP, opens an explorer in a new tab	Paid	ViolationAttested on NEAR	solvency139ddd4b…, tag of solvency: 139ddd4b9ceadee62cac5d2ea379c5b29a4899f2cca77042fae7eec29e2da407	0.1 wNEAR6ePiYHuE…, NEAR transaction: 6ePiYHuETULUc4fAVjkMSwQ2UVWybEQaUmQQo3xBec9r, opens an explorer in a new tab

A key is a rule and the entry point that broke it: the first proof of each key is paid; a later one is a duplicate that keeps its own proof record. Each commit's page shows its proof card and how to check it.

antibody status --program 15

Rounds and the release gate

A round ships a fix as code overrides at the same anchor. The enclave checks it, every paid proof is re-run against it, and a release permit is signed only for code that every paid proof fails against.

No round yet: this program still runs its round-0 code. A round is how a fix ships, and only a fix every paid proof fails against is released.

The ledger

Every movement of the escrow keeps funded equal to available + reserved + paid + fees + returned. Amounts in wNEAR, which has no value on testnet.

balances

Where the escrow is

Available	0.300
Reserved	0.000
Paid	0.100
Fees	0.000
Returned	0.000
Funded	0.400

What came in

Deposits	0.400
Forfeited bonds	0.000
Challenge bonds	0.000
Funded	0.400

Forfeited bonds go to this program's escrow, where they pay future findings: never to us.

The audit

Accounted: 0.4
Reservations: 0 · held by the commits; equals reserved when it balances
Debt: 0 · owed and not yet funded, queued in commit order
Defaulted: 0

view bounty.antibody.testnet.audit({"program_id":15})

Holds if: ok: true (funded equals accounted, and reserved equals the commits' reservations)

antibody view --contract bounty.antibody.testnet --method audit --args '{"program_id":15}'