Audit Comp | Firelight
Firelight is an on-chain cover protocol. The contracts implement an upgradeable ERC4626-compatible vault for staked collateral, an off-chain-matched cover order allocation flow, cover receipt NFTs, incident assessment and payout execution, a vault reward distributor, and a Flare FTSO v2 price adapter exposed through a Chainlink AggregatorV3-compatible read surface.
Live
5d: 17h remaining
Primary Pool
$14,000All Stars Pool
Podium Pool
Vault TVL
$20,019.88Start Date
12 August 2026End Date
25 August 2026Rewards Token
USDCLines of Code
3,044Triaged by Immunefi
Runnable PoC Required
Vault program
Assets Body
##Technical Walkthrough https://drive.google.com/file/d/1b1AWKE-ZeML5VWdIzzNczY3s0Bd4MeJv/view
Build, Test, and Run
Prerequisites: Node.js and npm.
Clone the repository and check out the audit branch:
git clone https://github.com/immunefi-team/audit-comp-firelight.git
cd audit-comp-firelight
git checkout v1_audit_ready
Install dependencies and run the tests:
npm install
npm test
No .env file is needed to run local tests; Hardhat uses its default accounts.
Educational resources
- Official Firelight documentation: https://docs.firelight.finance/
- Phase 1 / Phase 2 overview: https://docs.firelight.finance/#phase-1-and-phase-2
- How Firelight works: https://docs.firelight.finance/introduction/how-firelight-works
- Vault architecture: https://docs.firelight.finance/core-concepts/vault-architecture
- Staking deposits and withdrawals: https://docs.firelight.finance/for-stakers/deployments-and-withdrawals
- Program-operator Cover Tokens: https://docs.firelight.finance/for-program-operators/cover-tokens
- Claims process: https://docs.firelight.finance/for-program-operators/claims-process
- Protocol architecture / on-chain components: https://docs.firelight.finance/protocol-architecture/on-chain-components
- Claims liquidation and payout waterfall: https://docs.firelight.finance/protocol-architecture/claims-liquidation