The VeChain Hayabusa upgrade is the second phase of the VeChain Renaissance. The Hayabusa upgrade will upgrade VeChainThor’s consensus mechanism, tokenomics and degree of decentralization.

VeChain Hayabusa | Academy

Concise guide to the essence, mechanics, applications and significance of blockchain technology — great for complete beginners to get the core concepts before diving into VeChain specifics.

Introduction to blockchain

Overview of VeChain: what it is, goals, and where it sits in the blockchain ecosystem (dual-token model, enterprise focus). Good first read for new contributors/researchers.

About the VeChain blockchain

Project 101

Explains VeChain's EVM compatibility, why it matters, and implications for Solidity developers (porting, toolchain compatibility and caveats). Useful for developers familiar with Ethereum.

EVM Compatibility (Solidity / EVM)

Covers standard smart contract operations (minting, transfers, locking etc.), plus safety patterns (access control, read-only queries) specific to VeChain. Good for developers to avoid basic mistakes.

Smart Contract Actions & Safety (VeChain Builders Academy)

Information on how to interact with contracts via the VeChain SDK (building clauses, transaction signing, etc.), which has security implications (e.g. properly building & signing, avoiding misuse of APIs).

VeChain SDK & Contracts (SDK Guidance)

Language

Deep dive into programmable smart-contract wallets, ERC-4337-style workflows and how VeChain approaches account abstraction — useful to understand advanced UX/security patterns and new attack surface considerations.

Account Abstraction

Overview of VeChainThor’s consensus, PoA2.0 upgrade, and implications for protocol-level security (node operators, block validation, finality assumptions).

VeChainThor Security Model

How governance decisions and authority node audits are structured in VeChain, plus transparency requirements for node operators.

Governance & Authority Masternodes

Common pitfalls, Ethereum-compatibility caveats, and guidelines for safe contract development on VeChain.

Smart Contract Security on VeChain

Detailed definitions of the types of nodes (Authority Masternodes, Economic & X-Nodes, Full Nodes), duties, collateral, identity requirements, and rewards. Critical for understanding how node operators secure the network.

Nodes & Validator Requirements

Project - Advanced Concepts

Explains available block explorers and how to use them to inspect blocks, transactions, addresses and contract activity — first stop for on-chain investigation.

Block Explorers

Shows transaction structure, receipts, outputs and example SDK/JSON-API calls to fetch transaction details and receipts — essential for programmatic investigation and PoC reproduction.

Read Transactions (SDK / JSON-API)

Investigating On-Chain Data

Step-by-step guide to run a local Thor Solo Node (installation, CLI options, Docker, launching) — ideal for forking/sandbox testing and local PoC vulnerability testing.

How to run a Thor Solo Node

Guide to create/configure a custom VeChainThor network for isolated testing, network parameter adjustments and reproducible PoCs. Use this to test edge-case attacks without touching main/testnet.

Custom Network

Running Proof of Concept (PoC)

Slowmist Audit

NCC Group Audit

Coinspect Audit

Audits & Known Issues

Defines a standard for personal message signing in VeChainThor, adapting Ethereum’s eth_sign to VeChain’s signature format.

VIP-190

Introduces designated gas payer functionality, allowing a transaction sender to specify another account to cover VTHO fees.

VIP-191

Proposes a simple self-signed certificate mechanism to let users attest to agreements or provide identity proofs via key signing.

VIP-192

Standardizes the interaction protocol between transaction senders and gas payers to ensure smooth fee delegation.

VIP-201

Proposes a protocol enhancement within the VeChain ecosystem.

VIP-214

Suggests improvements related to transaction processing or runtime behavior.

VIP-220

Introduces refinements for contract interfaces or developer APIs.

VIP-230

Outlines changes associated with consensus updates or node behavior.

VIP-240

Adds a standard for application-level or interface functionality.

VIP-241

Expands on EVM or transaction envelope enhancements for the network.

VIP-242

Extends smart contract functionality to improve developer and dApp capabilities.

VIP-250

Adjusts network economics with modifications to the gas fee mechanism.

VIP-251

Standardizes transaction type annotations and envelope formatting.

VIP-252

Establishes improvements to security protocols, client APIs, or data formats.

VIP-253

Defines a new extension or interface standard under VeChain’s roadmap initiatives.

VIP-254

Contains strategy and guidelines for ecosystem partnerships, sustainability, technical & operational partner collaboration, and how VeChain expects ecosystem participants to align with its goals (e.g. sustainability, real-world traceability). Useful for auditors / project leads to see ecosystem expectations.

VeChain Whitepaper 3.0 (Ecosystem & Sustainability Guidelines)

Technical FAQ

Attackathons are education-based bug hunting competitions where security researchers compete over a reward pool by submitting impactful bugs in the project's code. Here's how they work:

**Before the Attackathon**<br/> Immunefi works with the project to host a security-focused education period, providing top tier education and support to security researchers.

**During the Attackathon**<br/> Security researchers experience optimal hunting conditions, with direct project support, responsiveness, and duplicate rewards.

**After the Attackathon**<br/> Immunefi spotlights the security accomplishments with a custom leaderboard, Attackathon Summary Report, Bugfix Reviews, and Individual Achievement Cards.

Ultimately, Attackathons serve to secure projects, develop their security ecosystem, and create new opportunities for security researchers.

What's an Attackathon?

The VeChain Hayabusa upgrade is the second phase of the VeChain Renaissance. The Hayabusa upgrade will
upgrade VeChainThor’s consensus mechanism, tokenomics and degree of decentralization.​
​
Key Highlights:​
- **Upgrade to Delegated Proof of Stake (DPoS)**: VeChainThor will migrate from PoA to DPoS, a more
decentralized consensus mechanism, while maintaining strong security and performance.​
- **Enhanced VTHO Tokenomics**: A dynamic VTHO generation rate will be distributed as a block reward to
validators and delegators that contribute to securing the VeChainThor network.​

Contract fails to deliver promised returns, but doesn't lose value

Unintended permanent chain split requiring hard fork (network partition requiring hard fork)

Direct loss of funds

Permanent freezing of funds (fix requires hardfork)

Unintended chain split (network partition)

Temporary freezing of network transactions by delaying one block by 500% or more of the average block time of the preceding 24 hours beyond standard difficulty adjustments

Attackathon | VeChain Hayabusa Upgrade

Starting in

Starting in

This Attackathon Is Starting Soon

$160,000 USD in conditional rewards are available for finding bugs on the VeChain Hayabusa Upgrade.