01Company requests DualDefense serviceThe company receives the approximate estimate of the time, complexity and cost of the audit from the Security provider.
02Security provider does internal auditA chosen security provider (blockchain security auditor such as Hacken) conducts an internal review of the client's code and provides a report.
03Creating Flash Pool for bug hunters and $HAI investorsTo participate in this pool, users have to stake $HAI. Auditors take up to 20% from every audit and use it to create a short-term (1 month) rewards pool. By limiting its size, Flash Pool functionality will ensure that APYs for HAI investors are up to 180%.
04Company runs crowdsourced audit on HackenProofAs soon as the Flash Pool is created, HackenProof will help the company to create a profile, set up rules and runs the 1-month crowdsourced contest.
05Triage of the incoming reportsSecurity experts review and validate vulnerability reports from bug hunters, prioritizing critical threats for the company to address quickly.
06Reward distributions from the Flash PoolIf critical vulnerabilities are found and verified, rewards from the Flash Pool go to the bug hunters who reported them. If no critical vulnerabilities are detected, $HAI investors receive distributions from the Flash Pool, earning up to 180% APY.