Blockwarden

SCOPE

Targeted Assets

https://github.com/lenfiLabs/lenfi-smart-contracts/blob/main/validators/collateral.ak https://github.com/lenfiLabs/lenfi-smart-contracts/blob/main/validators/delayed_merge.ak https://github.com/lenfiLabs/lenfi-smart-contracts/blob/main/validators/leftovers.ak https://github.com/lenfiLabs/lenfi-smart-contracts/blob/main/validators/liquidity_token.ak https://github.com/lenfiLabs/lenfi-smart-contracts/blob/main/validators/oracle_validator.ak https://github.com/lenfiLabs/lenfi-smart-contracts/blob/main/validators/order_contract.ak https://github.com/lenfiLabs/lenfi-smart-contracts/blob/main/validators/placeholder_nft.ak https://github.com/lenfiLabs/lenfi-smart-contracts/blob/main/validators/pool.ak https://github.com/lenfiLabs/lenfi-smart-contracts/blob/main/validators/pool_config.ak https://github.com/lenfiLabs/lenfi-smart-contracts/blob/main/validators/pool_stake.ak https://github.com/lenfiLabs/lenfi-smart-contracts/blob/main/lib/aada/utils.ak https://github.com/lenfiLabs/lenfi-smart-contracts/blob/main/lib/aada/types.ak https://github.com/lenfiLabs/lenfi-smart-contracts/blob/main/lib/aada/nft_pointers.ak https://github.com/lenfiLabs/lenfi-smart-contracts/blob/main/lib/aada/nft.ak https://github.com/lenfiLabs/lenfi-smart-contracts/blob/main/lib/aada/finance.ak

$20,000

Max Payout

Max Resolution Time

30 Business Days

9th February 2024

Start Date

Documentation

lenfi.gitbook.io/docs

RULES

Focus Area

In Scope

Thefts and freezing of principal of any amount.

System shutdowns that could jeopardize users’ funds.

Out of Scope

Theoretical vulnerabilities without any proof or demonstration

Redundant code

Any encrypted credentials, auth tokens, etc. checked into the repo

Bugs in dependencies

Attacks that require social engineering

Unique T&Cs

All submissions must include a POC, showing all impacts of the vulnerability

Duplicate submissions don't get rewarded. First submission of each bug wins

REWARDS

Critical

$500 - $20,000

High

N/A

Medium

N/A

Low

N/A