Pendle Bounty

Cantina live

Bug bounty program on Cantina. Official listing: https://cantina.xyz/bounties/fb1f1c54-0cb9-4201-8791-fb1e78e6e600. Scope and rules are controlled by the program — always verify against the official listing before testing.

Max bounty
$2M
Starts
2024-06-14
In-scope assets
74
Last updated
2026-08-13

In-scope assets

TypeAssetDetail
contract 0x000000000000c9b3e2c3ec88b1b4c0cd853f4321 limitRouter ethereum
contract 0x02adf72d5d06a9c92136562eb237c07696833a84 marketFactoryV5 optimism
contract 0x051dcd6a80f11fe68f77fb0ebde03853fa96b1fd vePendle base
contract 0x0582d93fd9c9d42f26be5d86a5f75291f92102c2 yieldContractFactoryV5 sonic
contract 0x07b1014c88f14c9e910092526db57a20052e989f senderEndpoint ethereum
contract 0x12930bd944bb34b0a21ccc2e7d32a6834bd58e19 lpWrapperFactory ethereum
contract 0x17f100fb4be2707675c6439468d38249dd993d58 gaugeController base
contract 0x1cb446fae25ae19878f9f71189902e2a6a6a749c externalRewardsDistributor hyperevm
contract 0x1e56299ebc8a1010cec26005d12e3e5c5cc2db00 gaugeController arbitrum
contract 0x1fbacedf510daa79dfd9b41227a7ba192d5d548d vePendle hyperevm
contract 0x2bea6bfd8fbff45aa2a893eb3b6d85d10efcc70e yieldContractFactoryV5 berachain
contract 0x30c6d4e892871220b5ab66c10db577da96fb974b vePendle mantle
contract 0x3209e9412cca80b18338f2a56ada59c484c39644 receiverEndpoint sonic
contract 0x33305665f69b4642d1275f4ce81c23651674d21c externalRewardsDistributor ethereum
contract 0x35a338522a435d46f77be32c70e215b813d0e3ac yieldContractFactoryV5 ethereum
contract 0x373dba2055ad40cb4815148bc47cd1dc16e92e44 routerFacets.ActionMiscV3 ethereum
contract 0x3942f7b55094250644cffda7160226caa349a38e vePendleAirdropDistributor ethereum
contract 0x428f2f93afac3f96b0de59854038c585e06165c8 gaugeController mantle
contract 0x42c706eab26aa8facfa4b3f32902ba872aaa10ac vePendleAirdropDistributor hyperevm
contract 0x44087e105137a5095c008aab6a6530182821f2f0 votingController ethereum
contract 0x44a2ddf5339ffde8c23af4099a64def59b11b128 marketFactoryV5 hyperevm
contract 0x47d74516b33ed5d70dde7119a40839f6fcc24e57 gaugeController ethereum
contract 0x4a03ce0a268951d04e187b1cf48075ee69266e27 routerFacets.ActionSwapYTV3 ethereum
contract 0x4f30a9d41b80ecc5b94306ab4364951ae3170210 vePendle ethereum
contract 0x523ecb8501c14507bca56d4752da1991c6176758 yieldContractFactoryV5 hyperevm
contract 0x59968008a703dc13e6beaeced644bdce4ee45d13 marketFactoryV5 base
contract 0x5dfbeaea9e41f85c334075482a20afb7031207ae yieldContractFactoryV5 mantle
contract 0x663c21103915b68e9da797cfdf3cab01a037d5ff routerFacets.ActionAddRemoveLiqV3 ethereum
contract 0x6875e4a945e498fe1b90bbb13cfbaf0b68658c9c vePendle berachain
contract 0x6a0ed0a9193fcbe7ae9b0f3d90f88e365cca64fc routerFacets.ActionStorageV4 ethereum
contract 0x6d653c8daac8d81c9ce98e038fbf94d7e652e147 lpWrapperFactory mantle
contract 0x6f14d3cd37a0647a3ee60eb2214486f8a1cddccc lpWrapperFactory bsc
contract 0x6fcf753f2c67b83f7b09746bbc4fa0047b35d050 marketFactoryV5 ethereum
contract 0x704478dd72fd7f9b83d1f1e0fc18c14b54f034d0 gaugeController bsc
contract 0x73d5dbf81a4f3bfa7b335e6a2d4638d6017a4fa8 reflector ethereum
contract 0x7b78f36abf6cf3c6c0dd54716dfef0607ae17846 routerFacets.ActionCallbackV3 sonic
contract 0x7c0fa6ad8c14afc85706e28b6ed2d9cbacc47161 lpWrapperFactory berachain
contract 0x7c7f73f7a320364dbb3c9aaa9bccd402040ee0f9 marketFactoryV5 bsc
contract 0x7e500c6efbb00fd3227888256e477171a1304721 gaugeController hyperevm
contract 0x7f6ca6aa1f2291992e252fb8e25348c4861c5c25 vePendleAirdropDistributor berachain
contract 0x852e59252c94716f0df19b52b36512f6c9297a96 routerFacets.ActionSimple ethereum
contract 0x888888888889758f76e7103c6cbf23abbf58f946 router ethereum
contract 0x8a09574b0401a856d89d1b583ee22e8cb0c5530b vePendle bsc
contract 0x8c237520a8e14d658170a633d96f8e80764433b9 feeDistributorV2 ethereum
contract 0x963ddbb35c1ae44e2a159e3b5fb5177e0b32660d yieldContractFactoryV5 base
contract 0x992ec6a490a4b7f256bd59e63746951d98b29be9 decimalsFactory ethereum
contract 0x997fbc511a8ad11f84a400feacd66e2a3fa805d2 routerFacets.ActionCallbackV3 ethereum
contract 0x998cf52b2585e05494bf9f2bf502351a9c7fda8f receiverEndpoint bsc
contract 0x9a9fa8338dd5e5b2188006f1cd2ef26d921650c2 pyYtLpOracle ethereum
contract 0xad511b12f73c145cf158eb92e4fa256937d952a4 receiverEndpoint hyperevm
contract 0xae898a7d07f8e27f25e13d0f351a7401f9a5bf9d externalRewardsDistributor optimism
contract 0xc9215ae9ec67385f38c755d862c8ee3702b5793a receiverEndpoint arbitrum
contract 0xca274a44a52241c1a8efb9f84bf492d8363929fc lpWrapperFactory base
contract 0xcb02435716b0143d4ac1bdf370302d619e714126 marketFactoryV5 mantle
contract 0xcb645c93820b92e5f21781c5c3c18c29bcb6126b lpWrapperFactory hyperevm
contract 0xcca0977ea3809c8fb785737eb9facd5b19626e81 yieldContractFactoryV5 optimism
contract 0xd29e76c6f15ada0150d10a1d3f45accd2098283b marketFactoryV5 arbitrum
contract 0xd4e9b0d466789d7f6201442eeccba6a75a552db0 pendleSwap optimism
contract 0xd4f480965d2347d421f1bec7f545682e5ec2151d pendleSwap ethereum
contract 0xd5c47d2383fddc19596489280c0a33ac42b2bb18 receiverEndpoint berachain
contract 0xd8d200d9a713a1c71cf1e7f694b14e5f1d948b15 routerFacets.ActionSwapPTV3 ethereum
contract 0xdb5db14819a16642e6736ab0cdfe0156f8e01ddf lpWrapperFactory arbitrum
contract 0xded51dca2eced7a0baab3d9711a87f214769da0f routerFacets.ActionStorageV4 sonic
contract 0xe006760020384a20774dea977c313ef5f51fe17d yieldContractFactoryV5 bsc
contract 0xe017ccc08505ac8fbb5a364680e459d9fbaee74d vePendle sonic
contract 0xecfeb97d7f070da5b93c5dc274183f1d7f68532f lpWrapperFactory optimism
contract 0xed18de5442297a4ec1ce59c7c7d9427adc2a012b receiverEndpoint optimism
contract 0xee708fc793a02f1edd5bb9dbd7fd13010d1f7136 receiverEndpoint base
contract 0xf2a26c2eb3c4098e03807442196fba7f78b125a2 decimalsFactory hyperevm
contract 0xf799e4c029d14f41dc1918c9a4c67242f565710e receiverEndpoint mantle
contract 0xfee31a6ec6ebefa0b5a594bf5b1139e3c6faa0fb marketFactoryV5 sonic
contract 0xff29e023910fb9bfc86729c1050af193a45a0c0c yieldContractFactoryV5 arbitrum
web https://api-v2.pendle.finance/core/docs#/Markets/MarketsSimplifiedController_getActiveMarkets
web https://api-v2.pendle.finance/core/docs#/Markets/MarketsSimplifiedController_getInactiveMarkets

Watching Pendle Bounty? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.

Track this program