Submission details

Field Value
Developer Greaze Mike
Email [email protected]
Submission date July 9, 2026
Bounty Break It Before Users Do: MultiHopper Agentic Flow Bugs & Fixes
GitHub repository https://github.com/thisisbigmike/multihopper-agentic-flow-tester

Executive summary

We built an automated test harness in TypeScript that runs the documented MultiHopper agentic routing flow:

  1. create
  2. prepare
  3. sign/broadcast
  4. confirm broadcast
  5. monitor

The client manages direct Solana Devnet wallet co-signing (Versioned v0 transactions and legacy transactions) and broadcasts directly to the Solana RPC cluster: https://api.devnet.solana.com/.

During testing under realistic execution paths and fault injections, we uncovered four distinct findings:

  1. [CRITICAL] Server status mutates to processing on failed/missing signature confirmation (fund safety)
  2. [HIGH] Missing Raydium pool on Devnet sandbox blocks stablecoin (USDC) integration testing
  3. [MEDIUM] API status mismatch / documentation gap (undocumented active status)
  4. [DOCS BLOCKER] Fragility of versioned transaction re-serialization

Findings (detailed)

1) [CRITICAL] Server status mutates to processing on failed/missing signature confirmation

Severity: Critical (Fund Safety / stuck-state)