A security issue was found in a blockchain system. It could create duplicate credit when an over-limit deposit was made to a router account. This did not let anyone steal money or hurt users. The problem was fixed by limiting a special rule only to active trades.

Awarded

spender

Immunefi bounty payout

A security report found a serious problem in a system that trades digital money.

- The problem let someone take out valuable digital tokens unfairly.
- It happened during a special kind of trade called "OTC settlement."
- The fix stops the wrong way of giving out tokens.
- Now, tokens are only given after they are properly bought.

- Dwellir helps the Hydration community with a special internet service called RPC.
- They handle about 49 million requests every day.
- This request is for money to pay for the service in July, August, and September 2025.
- They also want to add a special service just for Dia.
- They are asking for $3,459.
- The price was based on the average HDX price over the last week.
- You can read more in their full proposal.

Dwellir - Public RPC Endpoint Service Q3 2025

- DIA provided oracle services to Hydration.
- The monthly cost is $3,762.50 in HDX.
- The total for 3 months is $11,287.50.
- This equals 1,684,701 HDX based on the price of $0.0067 per HDX.
- Payments will be sent to a specific address.
- All payments will be made every three months.
- DIA is happy to continue supporting Hydration.

Tip Request for DIA Oracle Services on Hydration

- A bug was found in Hydration's system.
- It let bad users steal money from others.
- The problem was fixed quickly.
- The team stopped withdrawals to keep money safe.
- They updated the system to check user inputs better.
- The fix made sure users could only take their own money.
- About $200,000 was at risk.
- The person who found the bug got a reward.

treasurer

Immunefi report payout - Malicious users will steal LP shares cross‑pool from liquidity‑mining depositors

- A bug was found in the Hydration chain's liquidity mining system.  
- The bug could let someone manipulate token prices to get unfair rewards.  
- The attack needed a lot of money and wasn't practical in real life.  
- Only one pool (MYTH-DOT) was at risk, and no attacks happened.  
- The team fixed the problem by using an oracle to check prices.  
- The whitehat who reported the bug got a $5,000 reward.  
- The fix was added in a recent update.

Medium bounty programme submission: XYK Liquidity mining share value manipulation could lead to bigger reward than expected 

- Dwellir helps Hydration with RPC services.  
- They handle about 4.9 million requests daily.  
- Asking for $3,459 to cover costs for April–June 2025.  
- Includes a special RPC service for Dia.  
- Improved service with servers in Europe and Asia.  
- New RPC address: hydration-rpc.n.dwellir.com.  
- HDX price based on a 7-day average.

Dwellir - Public RPC Endpoint Service Q2 2025

- **Name:** Vlady  
- **Role:** Community leader for Russian-speaking members  
- **Since:** 2020 (HydraDX & Basilisk)  
- **Work:** Manages Telegram group, hosts live streams  
- **Team:** Works with Jonh Menthan  
- **Hours:** 7 hours/week (140 hours total)  
- **Payment:** $20/hour (269,749 HDX total)  
- **Links:** Previous work and community group

Vlady Limes Community Management Tip Request [February - June 2025]

- DIA asks for payment for oracle services to Hydration.  
- The payment is for 6 months of past work (August 2024 - January 2025).  
- Total cost is $22,575, which equals 2,052,272 HDX.  
- Future payments will be requested every 3 months.  
- Payment will be sent to a specific HDX address.  
- DIA is happy to adjust payment timing if needed.  
- They look forward to continuing their work with Hydration.

tipper

Short-lived Dwellir dedicated RPC node

Reimburse DIA oracles gas top-up

- A bug was found where someone could destroy their staking NFT and make new ones, affecting rewards for others.  
- This doesn't let the attacker gain anything but lowers rewards for honest users.  
- Some rewards might not be claimable right now.  
- The problem can be fixed later by adjusting settings.  
- It's considered a medium-level issue.  
- The suggested reward is $5,000 in HDX tokens.  
- A fix has been made and shared in a GitHub link.

Medium level Immunefi report "staking rewards locking"

- A website called Galactic Council had a problem.  
- A special tool called GraphQL let people send fake messages.  
- The messages could trick users, but no one used it for bad things.  
- The website owners fixed the problem before it caused trouble.  
- They decided to give a $1000 reward to the person who found the issue.  
- The reward will be paid in a digital currency called HDX.

Immunefi report - misconfigured SQL endpoint vulnerable to injection

- A report showed a trick in XYK pools where owners could manipulate prices.  
- Attackers create small pools and wait for big investors to add money.  
- They change prices quickly before the investor can act.  
- This trick can steal value but is risky for attackers.  
- It’s like a "pump and dump" scam—high risk for users.  
- Hydration fixed the issue to protect users.  
- The hacker got a $5,000 reward for finding the problem.  
- A new safety feature was added to stop these attacks.

Medium level Immunefi report "XYK add liquidity limits"

Tip treasury - Jose Crypto- (February-April)

- Bifrost sends vDOT/DOT prices using XCM.  
- It costs about 2200 HDX in fees.  
- This proposal pays for 222 days of fees.  
- After 222 days, we'll find a better way to fund it.  
- The price helps keep GDOT balanced with DOT and vDOT.  
- It will also be used for vDOT borrowing soon.  
- All fees go back to the treasury.  
- Bifrost covers their own fees.

vDOT oracle update fees for 222 days

Refund cost of 2 weeks of vDOT oracle updates

- Dwellir helps Hydration with RPC services.  
- They handle about 77 million requests daily.  
- Asking for $3,459 to cover costs for January to March 2025.  
- Includes a special RPC service for Dia.  
- Improved service with servers in Europe and Asia.  
- New RPC address: **hydration-rpc.n.dwellir.com**.  
- HDX price based on the last 7-day average.

Dwellir - Public RPC Endpoint Service Q1 2025

- Subscan helps Hydration by keeping its website running smoothly.  
- They use computers, store data, and fix problems quickly.  
- There are different price plans based on how much data is used.  
- Hydration used about 250 GB in late 2024 and 277 GB in early 2025.  
- They are asking for $6,814 to pay for these services.  
- The payment will be made in HDX coins.  
- People asked for a new feature to track token balances.  
- Subscan will add this feature for free but it might cost $400 more per year.

Subscan Funding Proposal for Hydration Operation and Maintenance Fee - 2024 Q4 and 2025 Q1

- Vlady and John are community managers for Hydration's Russian-speaking group.
- They started working with Hydration from the beginning, during the LBP phase.
- They manage a Telegram group with over 1,300 members.
- They spend 1-2 hours daily, totaling about 15 hours a week, on community tasks.
- Their work includes updates, content creation, translations, and answering questions.
- They have been contributing for 5 months (September to January).
- They are requesting 500,000 HDX for their work.

Tip Treasury - JOHNM & Vlady Limes, Community Managers Tip for the last 5 months of contributions.

Tip treasury - Jose Crypto- (October- February)

- Dwellir helps the Hydration community with a public RPC service.
- They handle about 7.2 million requests every day.
- They are asking for $2,595 to cover costs for October, November, and December 2024.
- They improved the service by balancing it between Europe and Southeast Asia.
- The new service URL is hydration-rpc.n.dwellir.com.
- The HDX price used is based on the average over the last 7 days.

Dwellir - Public RPC Endpoint Service Q4 2024

### Funding Proposal for Hydration Operation and Maintenance

- **Purpose**: Request for funding to cover operation and maintenance fees for Subscan Explorer services.
- **Services Provided**: Includes computing resources, database storage, network bandwidth, monitoring, and technical support.
- **Current Charges**: Tiered pricing based on data usage, with the Hydration Network currently using 209.64 GB.
- **Requested Amount**: $2,678 to be converted to HDX based on the EMA7 price.
- **Exchange Rate**: HDX EMA7 price is $0.004986, requiring 537,103.890894 HDX.
- **Impact**: Ensures smooth network operations and supports Hydration's growth.
- **Request**: Seeking support from the Hydration Treasury for the total amount due.

2024-Q3-Hydration Network-Subscan Funding Proposal for Operation and Maintenance Fee

- Dwellir is helping people stay hydrated.
- They have a service that helps people get information about staying hydrated.
- They are getting a lot of requests for their service, over 84 million a day!
- They need some money to keep their service going for a few months.
- They are asking for $2,595 to cover their costs for July, August, and September in 2024.

Dwellir - Public RPC Endpoint Service Q3 2024

- HydraDX needs money to pay for services that help it run smoothly.
- The services provided by Subscan include collecting and storing data, maintaining network performance, and providing technical support.
- Subscan charges based on the amount of data used, and HydraDX has used 167.68 GB of data.
- HydraDX needs $2,516.85 USD to pay for these services, which will be converted to HDX based on the exchange rate.
- Paying for these services will help HydraDX continue to function well and grow.

Treasury Proposals