BEFORE
01 — 03
PROTECT. CHALLENGE. PROOF.
PROTECT. CHALLENGE. PROOF.
Security isn't a promise.
It's something you can verify.
START WITH A RULE 01 / 03NO WALLET NEEDED TO TRY THE EXAMPLES
01 / THE GUARDRAIL
Move within
the rules.
Local policy preview
The transfer either meets the policy or it doesn't.
01A / RULE SETIMMUTABLE POLICY
MAX / TRANSFER
60TOKENS
MAX / UTC DAY
100TOKENS
01B / RESULTLOCAL / NO TRANSACTION
×
BLOCKED
Transfer denied.
Transfer exceeds the 60-token limit.
01 / LIVE TESTNETCreate a real protected vault.
150 freely mintable BTEST. Test ETH needed for gas.
i Above is a local simulation. Only wallet-signed testnet actions create onchain receipts.
02 / NEXT: FIND THE WEAKNESSChallenge
02 / THE WEAK POINT
Break the
bad rule.
Mock-token practice
Find what the flawed vault fails to remember.
02A / THE VULNERABILITYINTENTIONAL
110/ 100
Two valid moves.
One broken limit.
The practice vault checks each transfer. It never adds up the day.
02B / WHAT HAPPENEDLOCAL EVALUATION
Per-transfer checkEach transfer must be ≤60
Daily spend check110 total vs 100 allowed
The flawed vault would allow an invalid daily total.
An isolated training vulnerability. No valuable asset, paid bounty or exploit is involved.
02 / LIVE TESTNETProve it onchain.
Isolated practice with freely mintable BTEST. No reward.
ESCROW / READ ONLYReward infrastructure.
WIF-capable contract deployed without WIF funding.
PUBLIC BTEST BOUNTY LIFECYCLEREAD ONLY / SYNTHETIC REVIEWERS
From finding
to settlement.
Inspect real Robinhood testnet receipts for the mock-token lifecycle. All demo roles are controlled by one test operator. These approvals are not independent security review.
Freely mintable BTEST only. No real WIF reward, paid bounty, audit or mainnet custody is claimed.
03 / THE EVIDENCE
Don't trust.
Verify.
Read-only RPC
No wallet required. The chain is the source.
03A / NETWORK46630
Checking…
ROBINHOOD CHAIN / TESTNET
03B / CONTRACT INSPECTORREAD ONLY
What's actually
onchain?
No vault address has been inspected.
03C / TRANSACTION INSPECTORPUBLIC RECEIPT
Every claim.
A transaction.
EXPLORE REAL TESTNET RECEIPTS
No transaction has been inspected.
i Receipts and contract state are live when RPC is available. Neither is a security audit.
READY FOR A REAL TESTNET WORKFLOW?Open Bounty Studio