โ All Bounties
Aura Finance
Aura Finance is a DeFi Yield protocol deployed on ethereum. Bug bounty program with rewards up to $1,000,000 for verified smart contract vulnerabilities.
ETHDeFi YieldPoC Required
Max Bounty$1,000,000
Min Bounty$1,000
PayoutUSDC
Findings0
Accepted0
Chains1
Live SinceJun 2022
01Severity & Rewards
02Program Rules
- 01Proof of Concept is required for all submissions. Reports without a working PoC demonstrating the vulnerability will not be considered.
- 02KYC is not required for this program. Pseudonymous submissions are accepted.
- 03Only previously unreported vulnerabilities are eligible. Duplicate submissions will be closed.
- 04Vulnerabilities must be reported through the WhiteClaws platform. Public disclosure before resolution disqualifies the submission.
- 05Testing must not disrupt live protocol operations. Use mainnet forks or testnets for Proof of Concept execution.
- 06For Critical severity findings, the security team may arrange direct communication for expedited resolution.
โ IN SCOPE
- โYield vault and strategy contracts
- โDeposit/withdrawal logic
- โReward harvesting mechanism
- โStrategy rebalancing functions
- โFee calculation and collection
โ OUT OF SCOPE
- โFrontend applications
- โOff-chain infrastructure