# Audits & Securities

## We don't need audit anymore, since All Weather has pivoted to an AA wallet based intent service."

## V1 Audits on Arbitrum (Deprecated)

Due to GMX's router upgrade, our portfolio contract was affected. As a result, we reimbursed all of our users on November 17, 2024. Below are the transactions we used for the reimbursements.

1. <https://arbiscan.io/tx/0x316c4baf20c54a3c520ed33a91a692c575efd9051d6213c43ccc8f69a97b6056>
2. <https://arbiscan.io/tx/0x0c1e06f16eba9e38076b91264e3410fa68cc5815f34006b4be311ee3de23dd13>
3. <https://arbiscan.io/tx/0x0d4fd4ac737b5eead65335f8f1c53ac75c781bc83cd5803043b059d101730df3>
4. <https://arbiscan.io/tx/0xc86638fb98b44caf419ff80aae5995190c3c6996c60908f8c7a65fadf2aa06da>
5. <https://arbiscan.io/tx/0x15c2d54601e1e43b93ac722ea7455f822e2fde515888d07d86c3644e74166c0c>
6. <https://arbiscan.io/tx/0x726287ec44bb1699e5a4bddf27a916d262a1fa1b5b4cdf0a4bee2f866489cb8e>
7. <https://arbiscan.io/tx/0xde412ce59a8a742b1b1ce25300dbb86442ad03472e7a32cbf160c94c6cf97e7f>

{% embed url="<https://github.com/david30907d/all-weather-scaffold/blob/1c91f81b8a3a02623a9af4f79a638cfe00a17e3c/packages/hardhat/audits/Salus.pdf>" %}

## Contract Side

However, you can still accss your funds by inputing your address via [Arbiscan](https://arbiscan.io/address/0x95503FfAffD9E8B2aEa782F36bb5C8B85a4e41D4#code)

1. Check Your Balance

<figure><img src="/files/2ilCeuM43cieExAjhmd3" alt=""><figcaption></figcaption></figure>

2. Check Your Claimable Rewards

<figure><img src="/files/1OOhblAehgY1GbZeZUZx" alt=""><figcaption></figcaption></figure>

3. Claim Your Rewards:

<figure><img src="/files/jeVB9e4lFBKenGCgO1NJ" alt=""><figcaption></figcaption></figure>

## Portfolio Contracts

* **Permanent Portfolio**: 0x95503FfAffD9E8B2aEa782F36bb5C8B85a4e41D4

## Vault Contracts

1. **Magic Vault:** 0xA3CDd5a4b9f5a69C5C3a297A428A10B742F1c6E1
2. **Equilibria GLP Vault**: 0xBb4D0819089879d83ae13fEe71aBeAa345629389
3. **Equilibria GDAI Vault**: 0x0F658FC0C72A729F1B8F8444601D657D3F30Db41
4. **Equilibria RETH Vault**: 0x5073bf9aE65963A5881F36560072adf5d4c6e870
5. **Equilibria Pendle Vault**: 0x4999AE9fDD361Ca6278B0295dd65776b4587E1aA
6. **Radiant Arbitrum Vault**: 0x99E9cE14C807e95329a2A35aDD52683528e53231

<https://arbiscan.io/token/0x95503FfAffD9E8B2aEa782F36bb5C8B85a4e41D4#balances>

<figure><img src="/files/3qoVo3dgFuft4NAwaJ8i" alt=""><figcaption></figcaption></figure>

## Contracts on BSC

### Portfolio Contracts (deprecated)

* **Permanent Portfolio**: 0x24D22cA076Dc055A6b0faD59678d91BA4C948000

### Vault Contracts

1. **ApolloX Vault:** 0xd56d8Dfd3A3D6F6dafc0b7b6945F6E7AB138706e

### Portfolio Contracts (v2, got exploited)

* **Permanent Portfolio**: 0xD188492217F09D18f2B0ecE3F8948015981e961a

### Vault Contracts (v2)

1. **ApolloX Vault:** 0x9Ad45D46e2A2ca19BBB5D5a50Df319225aD60e0d

### Security Incident

1. V2 contract got exploited on 3/5 and 3/6 ([txn1](https://bscscan.com/tx/0x541260769bd8c389a5896fb46982ff4f8821a8b22b6e1e4399bf01e841fb9ce4), [txn2](https://bscscan.com/tx/0x9983ca8eaee9ee69629f74537eaf031272af75f1e5a7725911d8b06df17c67ca)) and lost around $10760
   1. cracker's [address](https://debank.com/profile/0xff61ba33ed51322bb716eab4137adf985644b94d)
2. We've compensated all the losses to our users, and our co-founders took the losses themselves. Here are the transactions through which we paid back our users:
   1. [txn1](https://arbiscan.io/tx/0x2ca790c16af0dac48c8f44b2fae98423164d17ac32e812b62af56117951ac4ef)
   2. [txn2](https://arbiscan.io/tx/0xe365eda955d5fa48c2aceee6375cb6600c02587a74c434c036b069900933bf5e)
   3. [txn3](https://arbiscan.io/tx/0x6f3155dcad603017fd49d17112ccabba6c7645acc99c1fc1c7c655fb2a408989)
   4. [txn4](https://arbiscan.io/tx/0x53ad636d6559439c83eea1543e95bf2730a909fcc2119f283d233717ca992124)
   5. [txn5](https://arbiscan.io/tx/0x5c7a92902435dda8b521eea5706cf73a81497a7154b82c3f2f5a0126b1f5076a)
   6. [txn6](https://arbiscan.io/tx/0x8e6dfbf7b660a2c9e5d4dbdb595948bf4506ff70492f9fdb2c582c9a7ae8d9e7)

🚀 Your Web3 S\&P500! 🛡️ <https://all-weather-protocol.on-fleek.app/>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://zap-pilot.gitbook.io/zap-pilot/deprecation/audits-and-securities.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.