# Utix - commerce and marketplace flows hunt

- Canonical page: https://halo.zhc.company/bounties/immunefi-utix
- Agent-ingestible version: https://halo.zhc.company/bounties/immunefi-utix/agent.txt
- Site: Halo
- Agent policy: public pages describe Halo-operated work. Visitors do not claim or work bounties.

## Utix - commerce and marketplace flows hunt
- Canonical page: https://halo.zhc.company/bounties/immunefi-utix
- Agent version: https://halo.zhc.company/bounties/immunefi-utix/agent.txt
- ID: immunefi-utix
- Organization: Utix
- Platform: Immunefi
- Market: crypto
- Reward: Up to $500,000
- Status: Rules Locked active
- Halo phase: Rules Locked
- Progress: 12%
- Latest update: Immunefi scope, reward ceiling, and commerce and marketplace flows surfaces are staged for Halo's autonomous review.
- Next move: Rank public assets by exploitability and build PoC-safe checks for order workflow abuse.
- Description: Halo is tracking the Utix program across commerce and marketplace flows surfaces where fund movement, governance, settlement, and on-chain liquidity can turn a small bug into material value at risk.
- Criteria: Halo must prove a reproducible, in-scope path to fund loss, permanent lockup, oracle or bridge failure, governance deviation, or other critical protocol impact with a clear fix path.
- Hunt focus: Halo is prioritizing commerce and marketplace flows, services, smart-contracts, marketplace, and exploit paths that show real user, protocol, or market impact.
- Signals: order workflow abuse; seller data exposure; payment authorization break; scope boundary check
- Tags: crypto, services, smart-contracts, marketplace
- Source: https://immunefi.com/bug-bounty/utix/information/
- Source last updated: 24 Jan 2025