Skip to content
Quantix Security Labs

Research programmes.

8 programmes on protocols from Quantix Protocol Research, 6 of them open. Each one defines exactly what is in scope, what is not, how findings are rated and the rules researchers must follow. Validated findings are recognised; no programme offers money.

8 programmes

  • Quillon Vaults

    Yield

    Open

    ERC-4626 vaults with pluggable strategies. Research focuses on share accounting, strategy valuation and the timelocked upgrade path after remediation of the research assessment.

    Ecosystems
    ETH
    In-scope components
    5
    Asset types
    Smart contracts
    Scope and rules for Quillon Vaults

  • Fenwick Lending

    Lending

    Open

    Isolated-market lending on Arbitrum with formally verified core accounting. Researchers are asked to look for gaps between the verified model and the deployed behaviour.

    Ecosystems
    ARB
    In-scope components
    4
    Asset types
    Smart contracts
    Scope and rules for Fenwick Lending

  • Corvid AMM

    DEX

    Open

    Constant-product AMM on Solana written in Anchor. Account validation, PDA derivation and token-vault authority are the main research areas.

    Ecosystems
    SOL
    In-scope components
    4
    Asset types
    Smart contracts
    Scope and rules for Corvid AMM

  • Helion Protocol

    Liquid Staking

    Open

    Liquid staking with a permissioned operator set and an oracle committee. Research covers rebasing accounting, withdrawal processing and the committee reporting path.

    Ecosystems
    ETH
    In-scope components
    6
    Asset types
    Smart contractsInfrastructure
    Scope and rules for Helion Protocol

  • Veyra Finance

    Lending

    Open

    Pooled lending on Base with permit-based deposits and flash loans. The programme includes the transaction-building API used by the web application.

    Ecosystems
    BASE
    In-scope components
    5
    Asset types
    Smart contractsWeb / API
    Scope and rules for Veyra Finance

  • Axeline Bridge

    Interoperability

    Paused

    Cross-chain messaging between Optimism, Avalanche and Arbitrum with pluggable verifiers. Message validation, nonce handling and executor behaviour are in scope.

    Paused while remediation of the research assessment is reviewed. Submissions about the new code are welcome after the programme reopens.

    Ecosystems
    OPAVAX
    In-scope components
    6
    Asset types
    Smart contractsInfrastructure
    Scope and rules for Axeline Bridge

  • Northstar Custody

    Custody

    Open

    Institutional custody with MPC signing and a policy engine. The programme targets the client API, the approvals console and policy enforcement in a dedicated test environment.

    Ecosystems
    ETHSOL
    In-scope components
    4
    Asset types
    Web / APIInfrastructureWallet / SDK
    Scope and rules for Northstar Custody

  • Quarrystone Payments

    Payments

    Scheduled

    Merchant payments and pull-payment subscriptions in Sui Move. Research will focus on capability objects and shared invoice handling.

    Opens on 16 November 2026, after the package upgrade that introduces subscription limits.

    Ecosystems
    SUI
    In-scope components
    3
    Asset types
    Smart contracts
    Scope and rules for Quarrystone Payments

Found something in scope?

Report it privately with steps to reproduce. You receive a reference as soon as the submission is received.

Submit a findingSeverity guidelines