Ulysses
Get paid for a zero-day without anyone, including us, ever seeing it
Demo
About
Get paid for a zero-day without anyone, including us, ever seeing it. Researchers submit a live exploit encrypted. A Chainlink enclave replays it, proves the real damage, and releases the bounty, then reveals nothing until the patch ships. Not private finance. Private disclosure. First on CRE.
How it's made
The trick is that we built ourselves out of the loop on purpose. The researcher seals the exploit in the browser, encrypted (X25519 → HKDF-SHA256 → XChaCha20-Poly1305) to a public key only the enclave can open. It reaches us as ciphertext we can't read, and the plaintext never touches a server, the wire, or the sponsor. A Chainlink CRE Confidential Workflow runs it inside an AWS Nitro TEE. Only the sealed enclave holds the decryption key. There it unlocks the exploit, replays the attack against the live target via eth_simulateV1, and measures the exact drain straight off the Transfer logs. What leaves the enclave is only a verdict: an EIP-712 signature over {severity, lossAmount, exploitHash, researcher, programId, target}. A price and a commitment hash, never the payload. The raw attack never crosses out. The DON verifies a cryptographic attestation proving a genuine enclave ran the genuine code, then the verdict settles on-chain. BountyEscrow checks the attestor signature and releases the tier reward from escrow, with no arbiter and no disclosure. The same sealed exploit is replayed later against the patched contract to confirm the fix before anything is ever revealed. Pure-JS @noble crypto so it runs in the WASM enclave, and nothing is logged inside the box.