Stop 9 · Assessments
A security assessment report
A complete research assessment: scope, threat model, methodology, findings with severity and remediation status, and the technical report as a PDF.
On this stop
- Select an assessment to see its findings, severity and remediation charts.
- Published assessments download as a full technical report.
Helion Protocol
QX-TSA-2026-009 · v1.0 · b8e4d2a07f1c
PublishedSmart Contract Audit
Assessment stages
7 of 7 complete · review 10 Nov 2025 – 5 Dec 2025
- Stage 1, complete:10 Nov 2025ScopingRepository, commit and in-scope files agreed.
- Stage 2, complete:CompleteArchitecture reviewComponents, trust levels and assumptions mapped.
- Stage 3, complete:CompleteThreat modellingAssets, actors and threats enumerated.
- Stage 4, complete:5 Dec 2025Review and testingManual review, tooling, fuzzing and verification.
- Stage 5, complete:5 Dec 2025ReportingFindings written with exploit scenarios and fixes.
- Stage 6, complete:CompleteRemediation reviewFix commit reviewed finding by finding.
- Stage 7, complete:12 Jan 2026PublicationTechnical Security Assessment document generated.
Findings by severity
7findings
Remediation by severity
100% remediated · 0 open or partial
| Category | Resolved | Partially resolved | Acknowledged | Open |
|---|---|---|---|---|
| Critical | 0 | 0 | 0 | 0 |
| High | 1 | 0 | 0 | 0 |
| Medium | 3 | 0 | 0 | 0 |
| Low | 1 | 0 | 1 | 0 |
| Informational | 1 | 0 | 0 | 0 |
7 of 7 findings shown
| ID | Finding | Severity | L / I | Status |
|---|---|---|---|---|
| HP-01 | Oracle quorum can fall below a majority of committee membersGovernance manipulation · CWE-285 | High | M / H | Resolved |
| HP-02 | Batch finalisation reserves less ETH than the sum of claims, so the last claimant in a batch cannot withdrawPrecision and rounding · CWE-1339 | Medium | M / M | Resolved |
| HP-03 | Transfers of hETH can deliver one to two wei less than the requested amountPrecision and rounding · CWE-682 | Low | M / L | Acknowledged |
| HP-04 | Node operators can front-run pool deposits with their own withdrawal credentialsBusiness logic · CWE-362 | Medium | L / H | Resolved |
| HP-05 | Withdrawal-vault ETH arriving after the reference slot is counted as rewardsBusiness logic · CWE-841 | Medium | H / L | Resolved |
| HP-06 | Pause authority held by a single externally owned accountKey management · CWE-284 | Low | L / M | Resolved |
| HP-07 | Quorum and membership changes are not emitted as eventsCode quality | Informational | L / L | Resolved |