Audit Comp | Firelight
Firelight is an on-chain cover protocol. The contracts implement an upgradeable ERC4626-compatible vault for staked collateral, an off-chain-matched cover order allocation flow, cover receipt NFTs, incident assessment and payout execution, a vault reward distributor, and a Flare FTSO v2 price adapter exposed through a Chainlink AggregatorV3-compatible read surface.
Status
Finished
Primary Pool
$14,000All Stars Pool
Podium Pool
Vault TVL
$20,047.82Start Date
12 August 2026End Date
25 August 2026Rewards Token
USDCLines of Code
3,044Triaged by Immunefi
Runnable PoC Required
Vault program
| Rank | Whitehat | Valid Bugs | Chiefs | Dups | Crit | High | Med | Low | Insight | |
|---|---|---|---|---|---|---|---|
| 3 | 1 | 2 | 0300 | 0 | |||
| 2 | 0 | 2 | 0200 | 0 | |||
| 3 | 3 | 0 | 0201 | 0 | |||
| #4 | 1 | 1 | 0 | 0010 | 0 | ||
| #5 | 3 | 0 | 3 | 0300 | 0 | ||
| #6 | 1 | 0 | 1 | 0010 | 0 | ||
| #7 | $563 | 3 | 0 | 3 | 0111 | 1 | |
| #8 | $178 | 2 | 1 | 1 | 0110 | 0 | |
| #9 | $158 | 1 | 0 | 1 | 0001 | 1 | |
| #10 | $94 | 3 | 0 | 3 | 0210 | 0 | |
| #11 | $82 | 1 | 1 | 0 | 0001 | 0 | |
| #12 | $69 | 1 | 0 | 1 | 0010 | 0 | |
| #13 | $69 | 1 | 0 | 1 | 0010 | 0 | |
| #14 | $69 | 1 | 0 | 1 | 0010 | 0 | |
| #15 | $69 | 1 | 0 | 1 | 0010 | 0 | |
| #16 | $69 | 1 | 0 | 1 | 0010 | 0 | |
| #17 | $69 | 1 | 0 | 1 | 0010 | 0 | |
| #18 | $69 | 1 | 0 | 1 | 0010 | 0 | |
| #19 | $54 | 3 | 0 | 3 | 0003 | 0 | |
| #20 | $51 | 2 | 0 | 2 | 0002 | 0 | |
| #21 | $44 | 2 | 0 | 2 | 0101 | 0 | |
| #22 | $44 | 1 | 0 | 1 | 0001 | 0 | |
| #23 | $44 | 1 | 0 | 1 | 0001 | 0 | |
| #24 | $33 | 5 | 0 | 5 | 0302 | 0 | |
| #25 | $32 | 3 | 0 | 3 | 0201 | 0 | |
| #26 | $25 | 3 | 0 | 3 | 0210 | 0 | |
| #27 | $25 | 2 | 0 | 2 | 0200 | 0 | |
| #28 | $25 | 2 | 0 | 2 | 0200 | 0 | |
| #29 | $25 | 2 | 0 | 2 | 0200 | 0 | |
| #30 | $24 | 2 | 0 | 2 | 0200 | 0 | |
| #31 | $24 | 1 | 0 | 1 | 0100 | 0 | |
| #32 | $24 | 1 | 0 | 1 | 0100 | 0 | |
| #33 | $24 | 2 | 0 | 2 | 0200 | 0 | |
| #34 | $24 | 1 | 0 | 1 | 0100 | 0 | |
| #35 | $24 | 1 | 0 | 1 | 0100 | 0 | |
| #36 | $24 | 1 | 0 | 1 | 0100 | 0 | |
| #37 | $24 | 1 | 0 | 1 | 0100 | 0 | |
| #38 | $24 | 1 | 0 | 1 | 0100 | 0 | |
| #39 | $9 | 2 | 0 | 2 | 0110 | 0 | |
| #40 | $9 | 3 | 0 | 3 | 0201 | 0 | |
| #41 | $9 | 3 | 0 | 3 | 0201 | 0 | |
| #42 | $8 | 3 | 0 | 3 | 0201 | 0 | |
| #43 | $8 | 3 | 0 | 3 | 0102 | 0 | |
| #44 | $8 | 2 | 0 | 2 | 0020 | 0 | |
| #45 | $8 | 3 | 0 | 3 | 0111 | 0 | |
| #46 | $8 | 2 | 0 | 2 | 0101 | 0 | |
| #47 | $8 | 3 | 0 | 3 | 0012 | 0 | |
| #48 | $8 | 1 | 0 | 1 | 0001 | 0 | |
| #49 | $8 | 1 | 0 | 1 | 0001 | 0 | |
| #50 | $8 | 1 | 0 | 1 | 0001 | 0 | |
| #51 | $8 | 1 | 0 | 1 | 0001 | 0 | |
| #52 | $1 | 1 | 1 | 0 | 0100 | 0 | |
| #53 | $1 | 2 | 0 | 2 | 0200 | 0 | |
| #54 | $1 | 2 | 0 | 2 | 0200 | 0 | |
| #55 | $1 | 3 | 0 | 3 | 0300 | 0 | |
| #56 | $1 | 2 | 0 | 2 | 0200 | 0 | |
| #57 | $1 | 2 | 0 | 2 | 0200 | 0 | |
| #58 | $1 | 2 | 0 | 2 | 0200 | 0 | |
| #59 | $1 | 2 | 0 | 2 | 0110 | 0 | |
| #60 | $1 | 2 | 0 | 2 | 0110 | 0 | |
| #61 | $1 | 2 | 0 | 2 | 0110 | 0 | |
| #62 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #63 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #64 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #65 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #66 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #67 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #68 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #69 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #70 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #71 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #72 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #73 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #74 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #75 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #76 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #77 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #78 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #79 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #80 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #81 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #82 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #83 | $1 | 1 | 0 | 1 | 0100 | 0 | |
| #84 | $0 | 2 | 0 | 2 | 0110 | 0 | |
| #85 | $0 | 2 | 0 | 2 | 0110 | 0 | |
| #86 | $0 | 1 | 0 | 1 | 0010 | 0 | |
| #87 | $0 | 1 | 0 | 1 | 0010 | 0 | |
| #88 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #89 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #90 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #91 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #92 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #93 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #94 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #95 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #96 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #97 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #98 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #99 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #100 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #101 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #102 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #103 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #104 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #105 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #106 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #107 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #108 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #109 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #110 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #111 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #112 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #113 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #114 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #115 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #116 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #117 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #118 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #119 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #120 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #121 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #122 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #123 | $0 | 1 | 0 | 1 | 0100 | 0 | |
| #124 | $0 | 1 | 0 | 1 | 0010 | 0 | |
| #125 | $0 | 1 | 0 | 1 | 0010 | 0 | |
| #126 | $0 | 1 | 0 | 1 | 0010 | 0 | |
| #127 | $0 | 1 | 0 | 1 | 0010 | 0 | |
| #128 | $0 | 1 | 0 | 1 | 0010 | 0 | |
| #129 | $0 | 1 | 0 | 1 | 0010 | 0 | |
| #130 | $0 | 1 | 0 | 1 | 0010 | 0 | |
| #131 | $0 | 1 | 0 | 1 | 0010 | 0 | |
| #132 | $0 | 1 | 0 | 1 | 0001 | 0 | |
| #133 | $0 | 1 | 0 | 1 | 0001 | 0 | |
| DQ | [DISQUALIFIED] | $0 | 1 | 0 | 1 | 0001 | 0 |
| DQ | [DISQUALIFIED] | $0 | 1 | 0 | 1 | 0100 | 0 |