🕵️‍♂️Audits & Bug Bounties

Blend has been Audited by both Certora and Ottersec. All issues have been addressed.

Certora

175KB

Blend Certora Report.pdf

pdf

Ottersec

1013KB

blend_capital_final.pdf

pdf

Community Bug Bounties

The blend community is also offering bug bounties. Those are listed here:

• Markus' Bug Bounty

  Markus, CEO of Script3, is personally offering a 9 million BLND bug bounty for issues found in the core Blend protocol contracts. This covers the Lending Pool contract, Backstop contract, Pool Factory contract, and Emitter contract. The bounty will not be awarded for any of the issues covered in the Known Issues section of the docs.

  • Criteria:

    • Critical: Vulnerabilities that immediately result in a loss of user funds with minimal preconditions

    • High: Vulnerabilities that may result in a loss of user funds but are potentially difficult to exploit.

    • Medium: Vulnerabilities that may result in denial of service scenarios or degraded usability.

    • Low: Low probability vulnerabilities, which are still exploitable but require extenuating circumstances or undue risk.

    • Info: Best practices to mitigate future security risks. These are classified as general findings.

  • Payouts:

    • Critical: 500,000 to 2,000,000 BLND

    • High: 100,000 to 500,000 BLND

    • Medium 10,000 BLND

    • Low 1,000 BLND

    • Payout amounts within ranges are up to the discretion of Markus

  • Contact Info:

    • Twitter: https://x.com/markus_0_