VeChain Hayabusa | Academy

The VeChain Hayabusa upgrade is the second phase of the VeChain Renaissance. The Hayabusa upgrade will upgrade VeChainThor’s consensus mechanism, tokenomics and degree of decentralization.

View Attackathon

What's an Attackathon?

Attackathons are education-based bug hunting competitions where security researchers compete over a reward pool by submitting impactful bugs in the project's code. Here's how they work:

Before the Attackathon
Immunefi works with the project to host a security-focused education period, providing top tier education and support to security researchers.

During the Attackathon
Security researchers experience optimal hunting conditions, with direct project support, responsiveness, and duplicate rewards.

After the Attackathon
Immunefi spotlights the security accomplishments with a custom leaderboard, Attackathon Summary Report, Bugfix Reviews, and Individual Achievement Cards.

Ultimately, Attackathons serve to secure projects, develop their security ecosystem, and create new opportunities for security researchers.

Starting in

1d: 17h
Reward Pool
$160,000
Start Date
01 October 2025
End Date
26 October 2025
Rewards Token
USDT
Triaged by Immunefi
Yes
KYC Required
Yes
Lines of Code
9,244
View Attackathon

⁣1. Project 101

1.1. Introduction to blockchain

Concise guide to the essence, mechanics, applications and significance of blockchain technology — great for complete beginners to get the core concepts before diving into VeChain specifics.

Beginner

1.2. About the VeChain blockchain

Overview of VeChain: what it is, goals, and where it sits in the blockchain ecosystem (dual-token model, enterprise focus). Good first read for new contributors/researchers.

Beginner

⁣2. Language

2.1. EVM Compatibility (Solidity / EVM)

Explains VeChain's EVM compatibility, why it matters, and implications for Solidity developers (porting, toolchain compatibility and caveats). Useful for developers familiar with Ethereum.

Beginner

2.2. Smart Contract Actions & Safety (VeChain Builders Academy)

Covers standard smart contract operations (minting, transfers, locking etc.), plus safety patterns (access control, read-only queries) specific to VeChain. Good for developers to avoid basic mistakes.

Beginner

2.3. VeChain SDK & Contracts (SDK Guidance)

Information on how to interact with contracts via the VeChain SDK (building clauses, transaction signing, etc.), which has security implications (e.g. properly building & signing, avoiding misuse of APIs).

Beginner

⁣3. Project - Advanced Concepts

3.1. Account Abstraction

Deep dive into programmable smart-contract wallets, ERC-4337-style workflows and how VeChain approaches account abstraction — useful to understand advanced UX/security patterns and new attack surface considerations.

Advanced

3.2. VeChainThor Security Model

Overview of VeChainThor’s consensus, PoA2.0 upgrade, and implications for protocol-level security (node operators, block validation, finality assumptions).

Intermediate

3.3. Governance & Authority Masternodes

How governance decisions and authority node audits are structured in VeChain, plus transparency requirements for node operators.

Intermediate

3.4. Smart Contract Security on VeChain

Common pitfalls, Ethereum-compatibility caveats, and guidelines for safe contract development on VeChain.

Advanced

3.5. Nodes & Validator Requirements

Detailed definitions of the types of nodes (Authority Masternodes, Economic & X-Nodes, Full Nodes), duties, collateral, identity requirements, and rewards. Critical for understanding how node operators secure the network.

Intermediate

⁣4. Investigating On-Chain Data

4.1. Block Explorers

Explains available block explorers and how to use them to inspect blocks, transactions, addresses and contract activity — first stop for on-chain investigation.

Beginner

4.2. Read Transactions (SDK / JSON-API)

Shows transaction structure, receipts, outputs and example SDK/JSON-API calls to fetch transaction details and receipts — essential for programmatic investigation and PoC reproduction.

Beginner

⁣5. Running Proof of Concept (PoC)

5.1. How to run a Thor Solo Node

Step-by-step guide to run a local Thor Solo Node (installation, CLI options, Docker, launching) — ideal for forking/sandbox testing and local PoC vulnerability testing.

Advanced

5.2. Custom Network

Guide to create/configure a custom VeChainThor network for isolated testing, network parameter adjustments and reproducible PoCs. Use this to test edge-case attacks without touching main/testnet.

Advanced

⁣6. Audits & Known Issues

6.1. Slowmist Audit

Intermediate

6.2. NCC Group Audit

Intermediate

6.3. Coinspect Audit

Intermediate

⁣7. Technical FAQ

7.1. VIP-190

Defines a standard for personal message signing in VeChainThor, adapting Ethereum’s eth_sign to VeChain’s signature format.

Advanced

7.2. VIP-191

Introduces designated gas payer functionality, allowing a transaction sender to specify another account to cover VTHO fees.

Advanced

7.3. VIP-192

Proposes a simple self-signed certificate mechanism to let users attest to agreements or provide identity proofs via key signing.

Advanced

7.4. VIP-201

Standardizes the interaction protocol between transaction senders and gas payers to ensure smooth fee delegation.

Advanced

7.5. VIP-214

Proposes a protocol enhancement within the VeChain ecosystem.

Advanced

7.6. VIP-220

Suggests improvements related to transaction processing or runtime behavior.

Advanced

7.7. VIP-230

Introduces refinements for contract interfaces or developer APIs.

Advanced

7.8. VIP-240

Outlines changes associated with consensus updates or node behavior.

Advanced

7.9. VIP-241

Adds a standard for application-level or interface functionality.

Advanced

7.10. VIP-242

Expands on EVM or transaction envelope enhancements for the network.

Advanced

7.11. VIP-250

Extends smart contract functionality to improve developer and dApp capabilities.

Advanced

7.12. VIP-251

Adjusts network economics with modifications to the gas fee mechanism.

Advanced

7.13. VIP-252

Standardizes transaction type annotations and envelope formatting.

Advanced

7.14. VIP-253

Establishes improvements to security protocols, client APIs, or data formats.

Advanced

7.15. VIP-254

Defines a new extension or interface standard under VeChain’s roadmap initiatives.

Advanced

7.16. VeChain Whitepaper 3.0 (Ecosystem & Sustainability Guidelines)

Contains strategy and guidelines for ecosystem partnerships, sustainability, technical & operational partner collaboration, and how VeChain expects ecosystem participants to align with its goals (e.g. sustainability, real-world traceability). Useful for auditors / project leads to see ecosystem expectations.