Helixpay
Card issuing and embedded wallets for marketplaces.
Held by Peregrine, released automatically on resolution. Covers 12 critical payouts at top of band.
- critical$20k – $75k
- high$6,000 – $20k
- medium$1,500 – $6,000
- low$300 – $1,500
Bands are floors and ceilings the program is held to. Mediation can move a report within a band, never below the floor of its agreed severity.
| Asset | Type | Max severity | Eligible | Note |
|---|---|---|---|---|
| *.helixpay.io | web | critical | yes | All first-party subdomains |
| api.helixpay.io | api | critical | yes | Issuing, ledger and KYC APIs |
| io.helixpay.wallet | mobile | critical | yes | iOS and Android |
| HelixVault (Ethereum mainnet) | contract | critical | yes | 0x4f2c…e91a, audited Q2 2026 |
| sandbox.helixpay.io | web | medium | yes | Test environment, no real funds |
- Denial of service of any kind
- Social engineering of Helixpay staff
- Issues in third-party KYC vendors
Helixpay runs a fully escrowed program with a published critical floor. Reports that demonstrate movement of funds between two researcher-owned test accounts qualify for the top of band without further escalation.
- criticalPGN-10468
Issuing API lets a sandbox key approve authorizations on a live card program it does not own
Authorization-decision webhooks were matched by card-program id without checking the key's environment. Two researcher programs were used; no third-party funds moved.
$60,000Resolved - criticalPGN-10349
HelixVault withdraw path skips share recomputation after emergency pause lift
Reproduced on a mainnet fork with a Foundry test; the top of the critical band was paid without negotiation.
$75,000Resolved
- 1@glasswing$75k1 resolved
- 2@rook$60k1 resolved