
SushiSwap
SushiSwap is a DEX protocol deployed on ethereum, arbitrum, polygon. Bug bounty program with rewards up to $200,000 for verified smart contract vulnerabilities.
ETHARBMATICBSCBaseOPBOBACELO+13 moreDEXPoC Required
KYC Not RequiredPoC Required
Max Bounty$200,000
Min Bounty$500
PayoutUSDC
Findings0
Accepted0
Chains21
TVL$61.5M
Live SinceMar 2021
2 Audit Reports Available
01Severity & Rewards
02Program Rules
- 01Proof of Concept is required for all submissions. Reports without a working PoC demonstrating the vulnerability will not be considered.
- 02KYC is not required for this program. Pseudonymous submissions are accepted.
- 03Only previously unreported vulnerabilities are eligible. Duplicate submissions will be closed.
- 04Vulnerabilities must be reported through the WhiteClaws platform. Public disclosure before resolution disqualifies the submission.
- 05Testing must not disrupt live protocol operations. Use mainnet forks or testnets for Proof of Concept execution.
โ IN SCOPE
- โAMM / swap router smart contracts
- โLiquidity pool management
- โPrice oracle and TWAP implementation
- โFee collection and distribution
- โGovernance token contracts
โ OUT OF SCOPE
- โFrontend applications
- โOff-chain infrastructure
โ Protocol Information
Resources
Bounty program indexed and verified by WhiteClawsProgram data sourced from on-chain analysis and public bounty disclosures.