Acme Lend v1 — pre-launch (testnet)

Acme Lend: our deliberately vulnerable fixtureOpenround 2light-client confirmedrecorded run, 2026-11-04

Acme Lend is our deliberately vulnerable fixture: a fictional lending protocol whose planted bugs are textbook classes, labelled in its code. Nothing here is a finding in a real protocol, and wNEAR on testnet has no value.

The one moment happened here: agent A's sealed proof was verified, paid, and paused the fixture on both chains. It is recorded, not live. Every step, timed.

Overview

The program as near-antibody stores it. Its manifest hash commits the anchor, the targets, the rules and the terms; once it is open, the deployment's owner can change nothing it depends on.

Project: acme.antibody.testnet, account: acme.antibody.testnet · our fixture project
Description: Fictional lending protocol with planted bugs (DELIBERATELY VULNERABLE TEST FIXTURE).
as written in the committed manifest
Program key: bounty.antibody.testnet/5, program key: bounty.antibody.testnet/5
Phase: Open round 2this round since 2026-11-04 16:19:16 UTC
Created: 2026-11-04 15:38:54 UTCB2qDDspG…, NEAR transaction: B2qDDspGkqVy8GQSgF15YCAnGhkPET386j9kAjZ55mL8, opens an explorer in a new tab
Opened: 2026-11-04 15:41:10 UTC9RHsnERo…, NEAR transaction: 9RHsnERoeBcsPW98Kv3whVerjcHxz51MNNmSt6pzG2Xj, opens an explorer in a new tab
Terms sha256: 3a9c40175b7ae46a…, terms sha256: 3a9c40175b7ae46a342566111ba65ca4a420c8ff2289eb7b08c8759b5125a34d
Manifest sha256: be42d0c87d995331…, manifest sha256: be42d0c87d995331f0b3f9f912cc3aad8537eedc56adc39bc088c2dcaf079518The manifest, as uploaded
Sealing key: 3ec2215a7331f2bb…, sealing public key: 3ec2215a7331f2bba02408458c8bbbcdefecde7d1c2a8e45e4b928fcb9686b25Proofs are sealed to it. It counts only once its activation run (run 31) is attested on NEAR: 5dhfsAVL…, NEAR transaction: 5dhfsAVLoSzpJ52oLQ7D9aWX8kwX1hDFAZahDrd95jB3, opens an explorer in a new tab

Its record

At stake: 0.161wNEAR available now
Verified attempts: 7
Paid findings: 4
First claim: 99 safter it opened
Claimed in the first hour: 60%of the escrow
Open for: 120.8 h

view bounty.antibody.testnet.get_program({"program_id":5})

Holds if: the manifest hash shown here, as near-antibody stores it

antibody judge --program 5

The rules as code

Each rule is one bit of the program's invariants contract. After a proof's calls, at the anchor, the verifier runs its check(): a set bit is a broken rule, paid by its severity. The verifier never reads a report.

The program's rules
Rule	Severity	Payout	Budget per round	Source
solvencybit 0an attested proof pauses Lender claims are covered at the committed reference price.	Critical	0.1 wNEAR	0.4 wNEAR	AcmeInvariants, line 13 (the source of solvency, opens the repository)
fees_to_treasurybit 1 Accrued fees plus the treasury balance never decrease.	High	0.03 wNEAR	0.4 wNEAR	AcmeInvariants, line 16 (the source of fees_to_treasury, opens the repository)
share_pricebit 2 The vault's share price never falls for the remaining holders.	Medium	0.01 wNEAR	0.4 wNEAR	AcmeInvariants, line 18 (the source of share_price, opens the repository)
protected_balancesbit 3added by a round The protected saver's acUSD never falls in a transaction the saver did not send.	Medium	0.01 wNEAR	0.4 wNEAR	AcmeInvariantsV2, line 75 (the source of protected_balances, opens the repository)

The budget caps what one rule pays per round, so many entry points into one root cause cannot drain the escrow. A finding's key is the rule and the entry point that broke it (by default, the target and function): the first proof of each key is paid.

The targets (9) on Sepolia

Rule strength

The rules caught 8 of 28 deliberately broken versions (mutants) of the final fix. It measures the rules, not the code's security, and a mutant that survives is not necessarily a bug.

dropped-guard: 2 of 5
flipped-comparison: 1 of 4
missing-access-check: 3 of 4
unchecked-transfer: 2 of 15

Report sha256e26bf38a106f…How it is measured

antibody judge --program 5

The terms

Committed in the manifest with the rules, their text fixed by the terms sha256, and enforced by near-antibody: no person decides a payout.

Payouts

The payout table
Severity	Payout	Rules
Critical	0.1 wNEAR	solvency
High	0.03 wNEAR	fees_to_treasury
Medium	0.01 wNEAR	share_price, protected_balances
Low	none	none

Bond per commit: 0.001 wNEAR · refunded, or forfeited to this program's escrow when the proof breaks nothing
Instant payments: up to 0.1 wNEAR
When a payout is instant
Paid in seconds when the verdict is attested on NEAR, within 0.15 wNEAR per 1 h. Otherwise a payout waits the challenge window; above the cap it also needs an agreeing second run.
Challenge bond: 0.005 wNEAR
Protocol fee: none · pinned at 0 for this program
Release fee: none · pinned at 0 for this program
Verification deposit: 0.03 NEAR per run, paid by whoever asks for it; OutLayer refunds the unused part

The escrow against the largest payout

1.61×the largest payout

0.161 available / 0.1 wNEAR largest

The available escrow over the largest payout. Below 1× the status page raises an alert; a payout the escrow cannot cover is queued as debt, in commit order.

Pauses: An attested proof of solvency, on a light-client anchor, pauses the protocol on every chain the project registered (one pause ticket per round), with no minimum impact.
Known issues: At most 4, sealed before open, their base payouts at most 50% of the escrow.
Gap lane: A proof that breaks no rule but harms a declared protected account by more than $100 is refunded and recorded as a gap claim, with 0.01 wNEAR reserved. It is paid if a later round adds a rule its proof breaks.
Unevaluable: A proof the rules cannot evaluate (check() reverts or runs out of gas) is refunded.

The windows

The program's windows
Window	Length	What it bounds
Reveal	10 min	A commit is revealed within this, or it expires and its bond goes to the escrow.
Challenge window	60 s	A verdict that is not paid instantly is final after this; anyone may challenge it within it, with the challenge bond.
Resolve	5 min	A challenge with no attested result within this voids the verdict; both bonds are refunded.
Run timeout	4 min	A run that never answered is void after this.
Infrastructure grace	10 min	An infrastructure failure is retried this long, then the commit closes with a refund.
Round minimum	2 min	A round runs at least this long before the next one opens.
Re-run window	10 min	Re-runs at a proposed fix may be asked for within this of its confirmed check.
Disclosure delay	10 min	A paid proof becomes public at most this long after its claim.
Exit grace	60 s	After the deadline plus this, anyone may settle the program (exit).
Deadline	2026-12-04 15:22:33 UTC	No commit is accepted after it.

The anchor

Every proof runs on the state proven at one block. A pause ticket, and the verdict guard, act only on an anchor the light client confirmed: on a project-attested anchor a verdict is about state the project chose.

Chain: Sepolia (11155111)
Block: 12063269 (opens an explorer)
Hash: 0x16662a318858fe75ac73c5ffc61dd184b0069ce90148470fff821b16d373f2c2
Its check: confirmed by the light clientnear-antibody compared the hash with client-eth2.sepolia.testnet when the program was created.anchor_checked (LightClient): B2qDDspG…, NEAR transaction: B2qDDspGkqVy8GQSgF15YCAnGhkPET386j9kAjZ55mL8, opens an explorer in a new tab
Base witness: The anchor state the rules and the round-0 checks read, proven against the anchor and pinned at activation.200cc7e636e7bd4f…, base witness sha256: 200cc7e636e7bd4fe9056cd2d4707d1eccadc3f656d4e9e3d61e68c9ffaba621Uploaded in NEAR transaction 2KJNqGZ2J3…, NEAR transaction: 2KJNqGZ2J3wMLt2PePNauvZXmC5fgme6b2T6qcTViZiQ, opens an explorer in a new tab by acme.antibody.testnet

Check the hash yourself

view client-eth2.sepolia.testnet.block_hash_safe(12063269 as 8 little-endian bytes: 0x2512b80000000000)

Expected: byte 0 is 1 (the client holds the block), then 32 bytes equal to the anchor hash.

The same check from a terminal, and the one that also hashes the block header from a Sepolia RPC:

antibody judge --program 5

antibody anchor-check --block 12063269

Known issues

Declared sealed before open; a later proof with the same tag is not paid again. Their count, rules and severities are public; their content stays sealed for good.

1 sealed

Known issue 1

Mediumnot fixed: still breaks

Rules: share_price (slot 2)
Tags: 45b2dc90a6a1182d…, known issue tag: 45b2dc90a6a1182df8596d4205f3d0e69771aa87dcd0fb7e9d9e1e5505f6d8c5
Verified by: run 32 · 3svDpwQA…, NEAR transaction: 3svDpwQAHveAB3CrmBvvQYGQw5HmBZ7SJspj9fTbBvZS, opens an explorer in a new tab
Later proofs: commit 17 (our fixture agent E): matched the known issue, not paid

Declared before open (opened with 1 known: 9RHsnERo…, NEAR transaction: 9RHsnERoeBcsPW98Kv3whVerjcHxz51MNNmSt6pzG2Xj, opens an explorer in a new tab). A round may never add one, and a known issue blocks no release.

view bounty.antibody.testnet.get_program({"program_id":5})

Holds if: the first known issue's tag, as committed before open

antibody status --program 5

The chains

Per chain: the program's adapter, the proxies it may pause or upgrade, and every permit near-guardian asked the MPC network to sign, with the transaction that carried it there.

Permits are EIP-712 messages the MPC network signs under this program's own path; each adapter trusts only its address, 0xd10a6d3c…aa94, the program's guardian address: 0xd10a6d3cdb6363b4200aa976f67296fba844aa94. The adapter can pause and upgrade; it can never unpause.

Sepolia (11155111)

released: running the fix

Adapter: 0xad6bc84c…d49b, Sepolia adapter: 0xad6bc84c8c5a9fb5aca79b13bb867b6e7930d49b, opens an explorer in a new tab
Proxies: AcmeLend0xca1fafbc…f8a7, AcmeLend on Sepolia: 0xca1fafbcfc14d665d76045a018b215987f39f8a7, opens an explorer in a new tabAcmeVault0x0433ceb8…cc46, AcmeVault on Sepolia: 0x0433ceb84db807402de6642929ebf1450381cc46, opens an explorer in a new tab

Permits on Sepolia
Permit	What it does	Status	Transaction
#6	Pause, for the ticket of commit 13round 0	confirmed on chain	0x224f6f77…, Sepolia transaction: 0x224f6f77ffd081042f634f2a214c1d23d5c232114e35a62e7935981a1ee779e4, opens an explorer in a new tabrecorded run
#8	Release AcmeLend to code hash0x7deb43a5fd…, code hash: 0x7deb43a5fd8a6aac5aee95c158e0e552f6e866407b3f4c62442b39c6c6092adbround 2

Base Sepolia (84532)

released: running the fix

Adapter: 0xad6bc84c…d49b, Base Sepolia adapter: 0xad6bc84c8c5a9fb5aca79b13bb867b6e7930d49b, opens an explorer in a new tab
Proxies: AcmeLend0xca1fafbc…f8a7, AcmeLend on Base Sepolia: 0xca1fafbcfc14d665d76045a018b215987f39f8a7, opens an explorer in a new tabAcmeVault0x0433ceb8…cc46, AcmeVault on Base Sepolia: 0x0433ceb84db807402de6642929ebf1450381cc46, opens an explorer in a new tab

The pause permits are the one moment's: A's Critical paused both chains. Every step, timed.

antibody judge --program 5

The sealed feed

Every commit in order: who, when, the state, the verdict and the payout; never the proof. A proof stays sealed until disclosure, and the project reads only the proofs it pays for.

3 with a zero-knowledge proof

The sealed feed, in commit order
Commit	Who	When	State	Verdict	Keys	Payout
Commit 13#0 · round 0	agent-a.antibody.testnet, account: agent-a.antibody.testnet our fixture agent A	2026-11-04 15:42:11 UTCCynCsx8P…, NEAR transaction: CynCsx8PNsFAYnYp6Zk5HjpSg3fWUrHSKfJ9CD9HQ3nP, opens an explorer in a new tab	Paid	ViolationAttested on NEARZero-knowledge proof	solvency32570322…, tag of solvency: 325703227266ea4d3828142c490819fbc957bef5065a5ce0daeb03ee75242199	0.1 wNEAR4W4CYBQu…, NEAR transaction: 4W4CYBQucfJL8bawGXJZL4ufAKR2A2Se45hBvT7YmtfZ, opens an explorer in a new tab
Commit 14#1 · round 0	agent-b.antibody.testnet, account: agent-b.antibody.testnet our fixture agent B	2026-11-04 15:46:49 UTC6kx1dWvV…, NEAR transaction: 6kx1dWvVDxhxtPYQaJxKqx9VFpi4cyN2T6BtiYNsh7LT, opens an explorer in a new tab	Paid	ViolationAttested on NEAR	fees_to_treasuryae7e21c8…, tag of fees_to_treasury: ae7e21c8af1b96023b13ae1daff4bcd1076b5b282e4f6ce6fb91e6fdae5f6de4	0.03 wNEARpNuD1vzK…, NEAR transaction: pNuD1vzKjRLYAAnAxHN6tdcg18aKK2jwTXGGstNon75, opens an explorer in a new tab
Commit 15#2 · round 0	agent-c.antibody.testnet, account: agent-c.antibody.testnet our fixture agent C	2026-11-04 15:47:49 UTC4ymAcWJ7…, NEAR transaction: 4ymAcWJ7wAV1tDKArS95uJz3BEeeSmQn6LSk7kJGfx7E, opens an explorer in a new tab	No violation · bond forfeited	No violationAttested on NEARZero-knowledge proof	no rule broken	—
Commit 16#3 · round 0	agent-d.antibody.testnet, account: agent-d.antibody.testnet our fixture agent D	2026-11-04 15:48:16 UTC6E5i332d…, NEAR transaction: 6E5i332dtV5a1kjgwyNBUkpSS9N5VEDv7i2Wj5JeAuXT, opens an explorer in a new tab	Duplicate · confirmed at the fix	ViolationAttested on NEARZero-knowledge proof	solvency32570322…, tag of solvency: 325703227266ea4d3828142c490819fbc957bef5065a5ce0daeb03ee75242199	—
Commit 17#4 · round 0	agent-e.antibody.testnet, account: agent-e.antibody.testnet our fixture agent E	2026-11-04 15:48:40 UTCHAuRahae…, NEAR transaction: HAuRahaeHhcmGMMHXn2EupxYNrVU8ziToHKhj285oomP, opens an explorer in a new tab	Known issue	ViolationAttested on NEAR	share_price45b2dc90…, tag of share_price: 45b2dc90a6a1182df8596d4205f3d0e69771aa87dcd0fb7e9d9e1e5505f6d8c5	—
Commit 18#5 · round 0	agent-f.antibody.testnet, account: agent-f.antibody.testnet our fixture agent F	2026-11-04 15:49:03 UTC5q7s1wJW…, NEAR transaction: 5q7s1wJWzpazCW6wmtk13RS5ZZHDNakQSBXKyhYxjdYL, opens an explorer in a new tab	Paid	ViolationAttested on NEAR	solvencya74dddb6…, tag of solvency: a74dddb61406f343a53af7298ef64be2f9334763dfcd23f17ca3b85547e53b8c	0.1 wNEAR2UE5mmKA…, NEAR transaction: 2UE5mmKAZmRRE5UroKwwiCLv4KqxfmcDH2oRZey7YhP6, opens an explorer in a new tab
Commit 19#6 · round 0	agent-g.antibody.testnet, account: agent-g.antibody.testnet our fixture agent G	2026-11-04 15:49:31 UTC8S2QVg9s…, NEAR transaction: 8S2QVg9snxcewMhewuUUHncVj7pexQRsQ6Deh63MUTpu, opens an explorer in a new tab	Paid	No violationAttested on NEAR	no rule brokenpromoted in round 1: its re-run at that round's code broke a rule, so it is paid at its original priority	0.01 wNEAR3pkmXk1M…, NEAR transaction: 3pkmXk1MNDoRXQWe6gJio768vThkYzh6LavD7KsnnvLS, opens an explorer in a new tab

A key is a rule and the entry point that broke it: the first proof of each key is paid; a later one is a duplicate that keeps its own proof record. Each commit's page shows its proof card and how to check it.

antibody status --program 5

Rounds and the release gate

A round ships a fix as code overrides at the same anchor. The enclave checks it, every paid proof is re-run against it, and a release permit is signed only for code that every paid proof fails against.

Round 1

release gate shut

In plain words

Fixed by this round's code (1 key, released from its holder)
- solvency32570322…, tag: 325703227266ea4d3828142c490819fbc957bef5065a5ce0daeb03ee75242199 proven by commit 13 (our fixture agent A); duplicate commit 16 (our fixture agent D)
Still breaks (2 keys carried to the same holder)
- fees_to_treasuryae7e21c8…, tag: ae7e21c8af1b96023b13ae1daff4bcd1076b5b282e4f6ce6fb91e6fdae5f6de4 proven by commit 14 (our fixture agent B)
- solvencya74dddb6…, tag: a74dddb61406f343a53af7298ef64be2f9334763dfcd23f17ca3b85547e53b8c proven by commit 18 (our fixture agent F)
Promoted: commit 19 (our fixture agent G): a duplicate or gap claim whose re-run broke a rule at this code, paid at its original priority
A paid proof still breaks a rule at this fix, so no release permit was asked for: this code does not ship.

Proposed: 7JJuBeTs…, NEAR transaction: 7JJuBeTsMAAkv3jPT1u7ZzWZjqk2HS5seShyRw7uciRF, opens an explorer in a new tab · the enclave checked the fix in run 41
Opened: 2026-11-04 16:05:27 UTCZDHuT1j6…, NEAR transaction: ZDHuT1j6QKdeLBYtJ1cwqasd4ohiYnKuaCjgSATVQug, opens an explorer in a new tab
Round manifest: d38c239590cc529c…, round 1 manifest sha256: d38c239590cc529c73d58de483823ecb3a4ecf2586261e5e673b4f2d2f18fc07Uploaded in NEAR transaction 9cjFNqM8Vh…, NEAR transaction: 9cjFNqM8VhD6V1q3zUebnKoTqswKhnPmXSTjifyegkUC, opens an explorer in a new tab by acme.antibody.testnet
The fix proposed: AcmeLend to implementation0x1E021a90…F915, round 1 implementation: 0x1E021a909Ee25b75fBcd0cE09229A0462a40F915, opens an explorer in a new tabcode hash 0x3919a37d…, code hash: 0x3919a37dd5b5dee0f49d0942b655bfe440e9d78d1a43dfe17ce7af8a6446dbe4

Re-runs at this fix

5 re-runs (2 fixed): each re-ran a sealed proof under this round's code.

run 42 re-ran commit 13 (our fixture agent A)No violationAttested on NEAR
run 43 re-ran commit 14 (our fixture agent B)ViolationAttested on NEAR
run 44 re-ran commit 16 (our fixture agent D)No violationAttested on NEAR
run 45 re-ran commit 18 (our fixture agent F)ViolationAttested on NEAR
run 46 re-ran commit 19 (our fixture agent G)ViolationAttested on NEAR

Release permits

None: the gate stayed shut.

view bounty.antibody.testnet.get_program({"program_id":5})

Holds if: round 1's release gate is false

antibody status --program 5

Round 2

release gate holds

In plain words

Fixed by this round's code (2 keys, released from their holders)
- fees_to_treasuryae7e21c8…, tag: ae7e21c8af1b96023b13ae1daff4bcd1076b5b282e4f6ce6fb91e6fdae5f6de4 proven by commit 14 (our fixture agent B)
- solvencya74dddb6…, tag: a74dddb61406f343a53af7298ef64be2f9334763dfcd23f17ca3b85547e53b8c proven by commit 18 (our fixture agent F)
Still breaksnothing: every paid proof fails at this code
Promoted: none
Every paid proof was re-run at this fix and fails: near-antibody asked for a release permit per proxy and chain.

Proposed: HbfLgvjk…, NEAR transaction: HbfLgvjkwRffLH1j5sKd98CeSyVrAY4jMcMHqKYE3gfB, opens an explorer in a new tab · the enclave checked the fix in run 47
Opened: 2026-11-04 16:19:16 UTC6zEDmeiC…, NEAR transaction: 6zEDmeiCA8SGn89XYGY4GgjsKnhE4np3uvA85eoZeNj1, opens an explorer in a new tab
Round manifest: 56eb8e1efb58561a…, round 2 manifest sha256: 56eb8e1efb58561a81db55686939b8bbe90707b883220ebdd87df917404aedb5Uploaded in NEAR transaction 4AMgLXSgtb…, NEAR transaction: 4AMgLXSgtbriDifGtobMHPaYJYL6NxQowdQwAs24Fum1, opens an explorer in a new tab by acme.antibody.testnet
The fix proposed: AcmeLend to implementation0x74E75477…17a9, round 2 implementation: 0x74E75477Af2d649FFe8037a37014dD8c7bd217a9, opens an explorer in a new tabcode hash 0x7deb43a5…, code hash: 0x7deb43a5fd8a6aac5aee95c158e0e552f6e866407b3f4c62442b39c6c6092adbAcmeVault to implementation0x32e8cd1D…34d0, round 2 implementation: 0x32e8cd1D58736310340d5103dEd748e3d8f434d0, opens an explorer in a new tabcode hash 0x8281ee18…, code hash: 0x8281ee18b7bd2f40337fe01767721ae85dcd4f0a2b1d8b331732baf81180ec4e

Re-runs at this fix

4 re-runs (4 fixed): each re-ran a sealed proof under this round's code.

run 48 re-ran commit 13 (our fixture agent A)No violationAttested on NEAR
run 49 re-ran commit 14 (our fixture agent B)No violationAttested on NEAR
run 50 re-ran commit 18 (our fixture agent F)No violationAttested on NEAR
run 51 re-ran commit 19 (our fixture agent G)No violationAttested on NEAR

Release permits

Release permits of round 2
Permit	Chain	Upgrades	Status	Transaction
#8	Sepolia	AcmeLendto code hash 0x7deb43a5…, code hash: 0x7deb43a5fd8a6aac5aee95c158e0e552f6e866407b3f4c62442b39c6c6092adb	confirmed on chain	0x57c042aa…, Sepolia transaction: 0x57c042aa8cf4ed8ec2f8606757ef4e3ff2204ec0dc15d0d89ec50be7007153cf, opens an explorer in a new tabrecorded run
#9	Sepolia	AcmeVaultto code hash 0x8281ee18…, code hash: 0x8281ee18b7bd2f40337fe01767721ae85dcd4f0a2b1d8b331732baf81180ec4e	confirmed on chain	0xca9f8fd3…, Sepolia transaction: 0xca9f8fd32af0b4b43cc000d4aeb0e9f56c6a848dbd63f9049b3967f142fab32b, opens an explorer in a new tabrecorded run
#10	Base Sepolia	AcmeLendto code hash 0x7deb43a5…, code hash: 0x7deb43a5fd8a6aac5aee95c158e0e552f6e866407b3f4c62442b39c6c6092adb	confirmed on chain	0xcf27959a…, Base Sepolia transaction: 0xcf27959a606ed1e3ee3df495fc5f63538e5f2c2ef51412c5e703743e5cf9825c, opens an explorer in a new tabrecorded run
#11	Base Sepolia	AcmeVaultto code hash 0x8281ee18…, code hash: 0x8281ee18b7bd2f40337fe01767721ae85dcd4f0a2b1d8b331732baf81180ec4e	confirmed on chain	0x90a98dec…, Base Sepolia transaction: 0x90a98dec6d9dcc3e386e0e895ed6b5b9a4dde852f5d64d859d91ceea54409697, opens an explorer in a new tabrecorded run

view bounty.antibody.testnet.get_program({"program_id":5})

Holds if: round 2's release gate is true

antibody status --program 5

The released code, on each chain

recorded 2026-11-04, checkable now

After round 2 the relayer submitted the release permits. Each proxy's implementation slot (EIP-1967) now names the final fix, and B's fee-sweep exploit (commit 14) reverts against it. Recorded in the results file under release.checks.

Recorded post-release checks
Chain	Check	Recorded
Sepolia	AcmeLend's implementation is the final fix0x74E75477…17a9, expected implementation: 0x74E75477Af2d649FFe8037a37014dD8c7bd217a9, opens an explorer in a new tab	true
Sepolia	AcmeVault's implementation is the final fix0x32e8cd1D…34d0, expected implementation: 0x32e8cd1D58736310340d5103dEd748e3d8f434d0, opens an explorer in a new tab	true
Sepolia	B's exploit reverts against the released code	true
Base Sepolia	AcmeLend's implementation is the final fix0x74E75477…17a9, expected implementation: 0x74E75477Af2d649FFe8037a37014dD8c7bd217a9, opens an explorer in a new tab	true
Base Sepolia	AcmeVault's implementation is the final fix0x32e8cd1D…34d0, expected implementation: 0x32e8cd1D58736310340d5103dEd748e3d8f434d0, opens an explorer in a new tab	true
Base Sepolia	B's exploit reverts against the released code	true

Read each slot now, from your browser

Sepolia, AcmeLend

eth_getStorageAt on chain 11155111

Holds if: the slot ends with 74e75477af2d649ffe8037a37014dd8c7bd217a9

curl -s https://ethereum-sepolia-rpc.publicnode.com -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"eth_getStorageAt","params":["0xCa1FAFbCFC14d665d76045A018B215987f39f8A7","0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc","latest"]}'

Sepolia, AcmeVault

eth_getStorageAt on chain 11155111

Holds if: the slot ends with 32e8cd1d58736310340d5103ded748e3d8f434d0

curl -s https://ethereum-sepolia-rpc.publicnode.com -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"eth_getStorageAt","params":["0x0433CEB84dB807402DE6642929EbF1450381CC46","0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc","latest"]}'

Base Sepolia, AcmeLend

eth_getStorageAt on chain 84532

Holds if: the slot ends with 74e75477af2d649ffe8037a37014dd8c7bd217a9

curl -s https://base-sepolia-rpc.publicnode.com -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"eth_getStorageAt","params":["0xCa1FAFbCFC14d665d76045A018B215987f39f8A7","0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc","latest"]}'

Base Sepolia, AcmeVault

eth_getStorageAt on chain 84532

Holds if: the slot ends with 32e8cd1d58736310340d5103ded748e3d8f434d0

curl -s https://base-sepolia-rpc.publicnode.com -H 'content-type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"eth_getStorageAt","params":["0x0433CEB84dB807402DE6642929EbF1450381CC46","0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc","latest"]}'

python3 scripts/docs/recorded.py 'release.checks.*.b_exploit_reverts' --file docs/results/testnet-2026-11-04.json

Each re-run is an enclave run with its own page: its verdict and its attestation. How rounds work: docs/rounds.md .

The ledger

Every movement of the escrow keeps funded equal to available + reserved + paid + fees + returned. Amounts in wNEAR, which has no value on testnet.

balances

Where the escrow is

Available	0.161
Reserved	0.000
Paid	0.240
Fees	0.000
Returned	0.000
Funded	0.401

What came in

Deposits	0.400
Forfeited bonds	0.001
Challenge bonds	0.000
Funded	0.401

Forfeited bonds go to this program's escrow, where they pay future findings: never to us. Here, 0.001 wNEAR came in that way.

The audit

Accounted: 0.401
Reservations: 0 · held by the commits; equals reserved when it balances
Debt: 0 · owed and not yet funded, queued in commit order
Defaulted: 0

view bounty.antibody.testnet.audit({"program_id":5})

Holds if: ok: true (funded equals accounted, and reserved equals the commits' reservations)

antibody view --contract bounty.antibody.testnet --method audit --args '{"program_id":5}'

Who acts on this program's verdicts

Verdicts are NEAR state: any NEAR contract can read them and act. This one is the smallest example, a treasury that freezes when the program it watches gets a verified Critical.

guard.antibody.testnet, a DAO treasury

Owned by the Acme project and locked: its full-access key is deleted. Anyone may report a commit; the guard reads near-antibody itself and trusts the reporter for nothing. It freezes only on an attested Critical of the program it watches, on a light-client anchor, and only for the first finding of its key.

The owner's first transfer went through. DpX3C6aj…, NEAR transaction: DpX3C6ajzA6JMxXzqG5Ew13aNDSppMDrrxKVoUtFPC1b, opens an explorer in a new tab
D's duplicate (commit 16) was reported first: not a first finding, so the report returned false and nothing froze. C63y1vnE…, NEAR transaction: C63y1vnEr2ri8nsbYjg8sjoNUU1F3e2wj6PsWjtggPac, opens an explorer in a new tab
A's attested Critical (commit 13, the solvency rule) froze it. EgbrSvLD…, NEAR transaction: EgbrSvLD7Rfx8kxHEvsJHNDWx4U6usg7YznT29cu4psX, opens an explorer in a new tab
Its next transfer was refused. 79wqNDoQ…, NEAR transaction: 79wqNDoQ7iLjVPkNKFCgTGGjkxDMSEu8j8BZwsC4MqsG, opens an explorer in a new tab
Then its full-access key was deleted: the guard is locked (code 7Wotb7nn…). EAHLthsR…, NEAR transaction: EAHLthsR4SasEsxnUSG48PsVzfTH2zBzrQj1bx25RB4p, opens an explorer in a new tab

The guard was added on 2026-11-06, after the recorded run, and that run's commits were reported to it then: so it froze almost two days after A's verdict, not seconds after.

Recorded in the results file under verdict_consumer (its note gives the date). The decision is one pure function, critical_finding ; how it decides: docs/verdict-guard.md .

Its state now

Watches: program 5
Owner: acme.antibody.testnet, account: acme.antibody.testnet
State: frozen
Frozen on: commit 13, run 33, slot 0
At: 2026-11-06 13:39:49 UTC
Reported by: antibody.testnet, account: antibody.testnet

view guard.antibody.testnet.get_state({})

Holds if: frozen on commit 13 (A's Critical, the solvency rule)

antibody view --contract guard.antibody.testnet --method get_state

#7	Pause, for the ticket of commit 13round 0	confirmed on chain	0x2bcb96c8…, Base Sepolia transaction: 0x2bcb96c817c3c0abecbe93d5c77cae3a671ebf631ff3dc2dec00bec753d6244b, opens an explorer in a new tabrecorded run
#10	Release AcmeLend to code hash0x7deb43a5fd…, code hash: 0x7deb43a5fd8a6aac5aee95c158e0e552f6e866407b3f4c62442b39c6c6092adbround 2	confirmed on chain	0xcf27959a…, Base Sepolia transaction: 0xcf27959a606ed1e3ee3df495fc5f63538e5f2c2ef51412c5e703743e5cf9825c, opens an explorer in a new tabrecorded run
#11	Release AcmeVault to code hash0x8281ee18b7…, code hash: 0x8281ee18b7bd2f40337fe01767721ae85dcd4f0a2b1d8b331732baf81180ec4eround 2	confirmed on chain	0x90a98dec…, Base Sepolia transaction: 0x90a98dec6d9dcc3e386e0e895ed6b5b9a4dde852f5d64d859d91ceea54409697, opens an explorer in a new tabrecorded run