HabitProofXHabitProofX

Security audits

Dated reviews.

Newest first. Each card is a completed source-code audit of this repository. These are independent-methodology reviews, not paid named-firm certifications of deployed bytecode. Nothing is pinned on PulseChain yet.

Effective 20 August 2026 · Last updated 20 August 2026

  1. 21 August 2026

    HPX-VAULT-2026-08-21

    Streak Vault hostile review (multi-asset)

    Historical — superseded by live vault spec

    HISTORICAL — this review targeted an earlier 4-token wad-weighted vault ($PRVX, WPLS, PLSX, HEX). Live unpublished source is permissionless ERC-20 + isolated destination-token pools. Read the findings as a dated snapshot, not the current spec.

    PASS WITH REMEDIATION — vault money path is epoch-active wad-weighted stake; Claim pays stable only. Not a named-firm bytecode certification. Nothing is deployed yet.

    View full audit HPX-VAULT-2026-08-21

  2. 20 August 2026

    HPX-SRC-2026-08-20-C

    Protocol-manipulation close-out

    Historical — superseded by live vault spec

    HISTORICAL — closed cycle-gaming on an earlier vault that weighted only staked $PRVX. Live vault uses isolated destination-token pools and any ERC-20. Dated snapshot, not the current spec.

    PASS WITH REMEDIATION — protocol money path is stake-and-epoch only

    View full audit HPX-SRC-2026-08-20-C

  3. 20 August 2026

    HPX-SRC-2026-08-20-B

    Independent second pass

    Follow-up review after the first remediations. Found wrong-chain registry writes, immortal streak weight, stale IPFS pack, OAuth on a no-account dApp, DexScreener any-chain price, shared localStorage.

    PASS WITH REMEDIATION (then superseded by C)

    View full audit HPX-SRC-2026-08-20-B

  4. 20 August 2026

    HPX-SRC-2026-08-20-A

    Initial source-code audit

    First repository review: cycle spam, fee black hole, HPX1 calldata vs ABI, missing reentrancy guard, over-broad CSP, local mark-complete spam.

    PASS WITH REMEDIATION (then superseded by B and C)

    View full audit HPX-SRC-2026-08-20-A

These documents are provided for transparency. They are not legal, tax, or investment advice. If you need advice for your situation, consult a qualified professional in your jurisdiction.