Perpetual Protocol

Program Overview

Perpetual Protocol is a decentralized, perpetual contract for every asset.

Verification

Verification of Perpetual Protocol’s bug bounty program on Immunefi is available at https://twitter.com/perpprotocol/status/1347001656404103168

Rewards by Threat Level

Rewards are distributed according to the exploitability level of the vulnerability and its impact based on the Immunefi Vulnerability Severity Classification System. The listed rewards represent the maximum that will be paid out for a security bug reporting.

The maximum payout for a “Critical” bounty is 10% of the total value locked in the “Clearing House” contract. This page will update periodically to reflect changes in TVL. Click here to view the most up-to-date balance.

Level
Critical - Empty or freeze the contract’s holdings	$10,000 - approximately $55,000
High - Token holders temporarily unable to transfer holdings	$5,000 - $9,999
Medium - Denial of Service (e.g. unbounded gas, block stuffing)	$1,000 - $4,999
Low - Contract fails to deliver promised returns (e.g. high-level economic errors)	<=$999
None - N/A	$0

Payouts are handled by Perpetual Protocol directly. Payouts are denominated in USD and are paid in PERP

Prioritized Vulnerabilities

Perpetual is especially interested in receiving and rewarding vulnerabilities of the following types:

1. Theft of assets from the system
2. Assets locked permanently inside the system

Additionally, Perpetual seeks reports of the following Immunefi Common Vulnerabilities.

The following Immunefi Commonly Excluded Vulnerabilities are excluded from the Perpetual bug bounty program.

Rules

See the Immunefi Standard Rules

Assets in Scope

RootBridge	https://github.com/perpetual-protocol/perpetual-protocol/blob/master/src/bridge/ethereum/RootBridge.sol
ChainlinkL1	https://github.com/perpetual-protocol/perpetual-protocol/blob/master/src/ChainlinkL1.sol
MetaTxGateway	https://github.com/perpetual-protocol/perpetual-protocol/blob/master/src/MetaTxGateway.sol
ClientBridge	https://github.com/perpetual-protocol/perpetual-protocol/blob/master/src/bridge/xDai/ClientBridge.sol
InsuranceFund	https://github.com/perpetual-protocol/perpetual-protocol/blob/master/src/InsuranceFund.sol
L2PriceFeed	https://github.com/perpetual-protocol/perpetual-protocol/blob/master/src/L2PriceFeed.sol
ClearingHouse	https://github.com/perpetual-protocol/perpetual-protocol/blob/master/src/ClearingHouse.sol
Amm	https://github.com/perpetual-protocol/perpetual-protocol/blob/master/src/Amm.sol
ClearingHouseViewer	https://github.com/perpetual-protocol/perpetual-protocol/blob/master/src/ClearingHouseViewer.sol
AmmReader	https://github.com/perpetual-protocol/perpetual-protocol/blob/master/src/AmmReader.sol