Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

USDai

Bug bounty on Cantina

Accepting reports smart contract solidity source code
Go to program
Top reward
$100,000
Top severity paid
Critical
Assets in scope
30
Public CVEs
0
Last change

At a glance

What to know before you start testing.

Pays up to $100,000
for critical bugs, from $100,000.
Report on Cantina
Submit through the program page.

Rewards

What Cantina lists as the payout for each severity.

Severity Reward
Critical $100,000

Reward range in US dollars. Cantina's own page has the details.

Scope

30 assets you may test.

Smart contracts 27

  • AbsoluteFeeModel.sol
  • AmortizedInterestRateModel.sol
  • BasePositionManager.sol
  • ChipGovernor.sol
  • Chip.sol
  • CollateralTimelock.sol
  • DepositTimelock.sol
  • EscrowTimelock.sol
  • LoanLogicV2.sol
  • LoanRouterPositionManagerLogic.sol
  • LoanRouterPositionManager.sol
  • LoanRouterV2.sol
  • OAdapter.sol
  • OLockAdapter.sol
  • OToken.sol
  • OUSDaiUtility.sol
  • PositionManager.sol
  • RatioFeeModel.sol
  • RedemptionLogic.sol
  • ReserveAccountFactory.sol
  • ReserveAccount.sol
  • ScheduleLogic.sol
  • SimpleInterestRateModel.sol
  • StakedChip.sol
  • StakedUSDai.sol
  • StakedUSDaiStorage.sol
  • USDai.sol

Source code 3

  • https://github.com/usdai-foundation/usdai-contracts/tree/devel
  • https://github.com/usdai-foundation/usdai-governance-contracts/tree/main
  • https://github.com/usdai-foundation/usdai-loan-router-contracts/tree/devel

Changes

Tracked since 12 Nov 2026. Last checked 4 minutes ago.

No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.

History

Scope and reward changes recorded before this page started tracking it.

  1. Scope added

    StakedChip.sol

  2. Scope added

    OLockAdapter.sol

  3. Scope added

    Chip.sol

  4. Scope added

    ReserveAccountFactory.sol

  5. Scope added

    ReserveAccount.sol

  6. Scope added

    ChipGovernor.sol

  7. Scope added

    AbsoluteFeeModel.sol

  8. Scope added

    SimpleInterestRateModel.sol

  9. Scope added

    AmortizedInterestRateModel.sol

  10. Scope added

    EscrowTimelock.sol

  11. Scope added

    DepositTimelock.sol

  12. Scope added

    CollateralTimelock.sol

  13. Scope added

    RatioFeeModel.sol

  14. Scope added

    LoanLogicV2.sol

  15. Scope added

    LoanRouterV2.sol

  16. Scope added

    OUSDaiUtility.sol

  17. Scope added

    OToken.sol

  18. Scope added

    OAdapter.sol

  19. Scope added

    LoanRouterPositionManagerLogic.sol

  20. Scope added

    LoanRouterPositionManager.sol

  21. Scope added

    BasePositionManager.sol

  22. Scope added

    PositionManager.sol

  23. Scope added

    RedemptionLogic.sol

  24. Scope added

    StakedUSDaiStorage.sol

  25. Scope added

    StakedUSDai.sol

  26. Scope added

    USDai.sol

  27. Scope added

    https://github.com/usdai-foundation/usdai-loan-router-contracts/tree/devel

  28. Scope added

    ScheduleLogic.sol

  29. Scope removed

    https://github.com/metastreet-labs/usdai-contracts/blob/devel/src/positionManagers/PositionManager.sol

  30. Scope removed

    https://github.com/metastreet-labs/usdai-loan-router-contracts/blob/devel/src/fees/AbsoluteFeeModel.sol

  31. Scope removed

    https://github.com/metastreet-labs/usdai-contracts/blob/devel/src/StakedUSDai.sol

  32. Scope removed

    https://github.com/metastreet-labs/usdai-contracts/blob/devel/src/positionManagers/BasePositionManager.sol

  33. Scope removed

    https://github.com/metastreet-labs/usdai-loan-router-contracts/blob/devel/src/EscrowTimelock.sol

  34. Scope removed

    https://github.com/metastreet-labs/usdai-contracts/blob/devel/src/RedemptionLogic.sol

  35. Scope removed

    https://github.com/metastreet-labs/usdai-contracts/blob/devel/src/positionManagers/LoanRouterPositionManagerLogic.sol

  36. Scope removed

    https://github.com/metastreet-labs/usdai-contracts/blob/devel/src/omnichain/OAdapter.sol

  37. Scope removed

    https://github.com/metastreet-labs/usdai-loan-router-contracts/blob/devel/src/LoanRouterV2.sol

  38. Scope removed

    https://github.com/metastreet-labs/usdai-contracts/blob/devel/src/StakedUSDaiStorage.sol

  39. Scope removed

    https://github.com/usdai-foundation/usdai-loan-router-contracts/blob/devel/src/ScheduleLogic.sol

  40. Scope removed

    https://github.com/metastreet-labs/usdai-contracts/blob/devel/src/omnichain/OToken.sol

Public CVEs

Published vulnerabilities in this vendor's products, from the NVD.

No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.