Contracts under [https://github.com/alpaca-finance/bsc-alpaca-contract](https://github.com/alpaca-finance/bsc-alpaca-contract) are in-scope unless under ‘/lapis’ folder and stated as a test asset.

Alpaca Finance is the largest lending protocol allowing leveraged yield farming on Binance Smart Chain. It helps lenders to earn safe and stable yields, and offers borrowers undercollateralized loans for leveraged yield farming positions, vastly multiplying their farming principals and resulting profits.

Critical Smart Contract Impact

High Smart Contract Impact

Medium Smart Contract Impact

Low Smart Contract Impact

Rewards for Smart Contract vulnerabilities are distributed according to the impact of the vulnerability based on the [Immunefi Vulnerability Severity Classification System V2.2](https://immunefi.com/immunefi-vulnerability-severity-classification-system-v2-2). This is a simplified 5-level scale, with separate scales for websites/apps and smart contracts/blockchains, encompassing everything from consequence of exploitation to privilege required to likelihood of a successful exploit. 

The amount of funds at risk affects the final severity classification of the bug report. A vulnerability resulting in the direct loss of protocol funds of 10% or greater remains classified as Critical. However, they are reclassified as High if the impact is less than 10% but greater than 0.1%. If the impact is less than 0.1%, they are reclassified as Medium.

Bug reports are required to include a complete issue description and instructions to reproduce the issue or a PoC. Reports that include a solution to fix the problem have a higher likelihood of receiving the full reward under the respective severity classification tier. 

The final reward is determined at the sole discretion of the Alpaca Finance team. 

Payouts are handled by the __Alpaca Finance__ team directly and are denominated in USD. However, payouts are done in __USDT__.


Alpaca Finance

Resources & Documentation