VDefi.meme

Testnet scope

Bug bounty

Research is welcome on visionarydefi-testnet. Rewards below are the chain program's published figures, paid from the developer coinbase after a mainnet freeze. This website does not mint them. Mainnet is not the network the daemon reports.

Critical targets

  • ZK-Shield de-anonymization. Read a target asset id out of the blinded mempool before the transaction is in a block. Critical only with a working proof, not a theory.
  • Curve invariant. Drain native VDefi from a bonding-curve treasury with rounding, micro-shares, or integer edges. The 888 trillion supply and the collateral must both be shown before and after.
  • privacy_connect linkage. Map an ephemeral identity key from the browser handshake back to a master address, or stitch the same person across sites. Do not include the key in the report.

Rewards

  • Critical1,000,000 VDefi
  • High250,000 VDefi
  • Medium50,000 VDefi
  • Low5,000 VDefi

Proof of concept

  • Run it on the public testnet or a local node with the same genesis.
  • Ship a script in Python, Go, TypeScript, or C++. No private keys in the script.
  • Name the block height and the transaction hash where the state machine failed.
  • Hash the write-up with SHA-256. Send the file in private. Do not paste an exploit on-chain or in a public chat.

Intake: VisionaryDefi Telegram. Window for a good-faith report: 90 days.

Out of scope

  • Volume flooding or denial of service against public sentry or seed nodes.
  • Social engineering of contributors, phishing, or a copied frontend.
  • Physical access, stolen devices, or a theory with no testnet proof.
  • Issues already reserved, including Bulletproofs+ and a full RandomX dataset.

Safe harbor

Good-faith research on this public testnet that stays inside this scope, avoids denial-of-service and social engineering, and is disclosed in private will not be met with legal action by the protocol maintainers. This is not permission to steal funds, extort, attack other people's wallets, or disrupt infrastructure that is outside the test. A report that includes a demand for payment outside this program is not covered.

This interface talks to an open protocol. It is not a custodian. It does not run a server that collects master spend keys, view keys, transaction graphs, or real-world identity. Keys you create stay in this browser. The published daemon refuses private keys. Shield envelopes opened on this device are not chain confirmations. The node in service reports visionarydefi-testnet. A fill, signature, or proof on that network is not a mainnet confirmation.

Tokens on the bonding curve are created by users, not by this interface. Nothing here is financial, legal, or investment advice. There is no promise of liquidity, price, or a buyer. Digital assets can lose all value. Consumer protections that apply to bank deposits do not apply. You can lose the entire amount you trade.

The protocol can place a curve, a pool, or all trading into safe-mode if an invariant breaks or the genesis halt key signs an emergency halt. Safe-mode stops trading. It does not mint coins, seize stealth notes, or reveal amounts. On the published testnet the halt quorum is the genesis key. That is not a claim that mainnet is live.

Security scope and safe harbor