Alchemix
Alchemix is your unified platform for saving, earning, borrowing, and fixed-term fixed-yield opportunities—all in one place. Built on years of iteration since launching the original self-repaying loan in 2021, Alchemix v3 brings all three pillars together with a smarter, more flexible design. The protocol allows you to:
- Save and grow – deposit ETH or USDC and let our vault invest and earn yield across diversified strategies.
- Borrow up to 90% LTV – access liquidity now while your collateral grows with yield and your leverage is reduced over time through scheduled redemptions. No interest rates to monitor, no price-based liquidations.
- Earn fixed-rate yield – lock in predictable returns through fixed-term redemptions of alETH or alUSD.
Triaged by Immunefi
PoC Required
Vault program
Arbitration enabled
Codebase
All smart contracts of Alchemix can be found at https://github.com/alchemix-finance/v2-foundry. However, only those in the Assets in Scope table are considered as in-scope of the bug bounty program. The in scope contracts can be found in the “src” folder, https://github.com/alchemix-finance/v2-foundry/tree/master/src, but excludes the “external/aave”, “mocks”, and “test” folder. All 3rd party code in any folder is also out of scope.
Though only the proxy contracts are listed as in-scope, current implementation and any further updates to the implementation contracts are considered in scope. When reporting a bug, please make sure to select the relevant proxy smart contract as the target.
If an impact can be caused to any other asset managed by Alchemix that isn’t on this table but for which the impact is in the Impacts in Scope section below, you are encouraged to submit it for the consideration by the project. This only applies to Critical and High impacts.