All smart contract code of Linea can be found at https://github.com/Consensys/linea-monorepo/tree/a83412e247b7d352b905c906271138e97c1ee5a/ . Documentation for the assets provided in the table can be found at https://docs.linea.build/

Other helpful links include:
- Infura docs - [https://docs.infura.io/networks/linea](https://docs.infura.io/networks/linea)
- RPC [https://linea-sepolia.infura.io/v3/](https://linea-sepolia.infura.io/v3/)

Linea is a type 2 zero knowledge Ethereum Virtual Machine (zkEVM). A zkEVM replicates the Ethereum environment as a rollup and allows developers to build on it as they would on Ethereum mainnet. Linea allows you to deploy any smart contract, use any tool, and develop as if you're building on Ethereum.

Contract fails to deliver promised returns, but doesn't lose value

Theft of gas

Unbounded gas consumption

Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield

Permanent freezing of funds

Linea Codebase

Linea Documentation

Rewards are distributed according to the impact the vulnerability could otherwise cause based on the Impacts in Scope table further below.

__Repeatable Attack Limitations__

In cases of repeatable attacks or attacks stemming from the same root cause, for smart contract bugs, only the first attack will be counted, regardless of whether the smart contract is upgradable, pausable, or killable.

__Previous Audits__

Consensys has provided these completed audit review reports for reference. Any unfixed vulnerability mentioned in these reports are not eligible for a reward.

__1st Audit Round__

__Diligence:__

- Plonk Verifier: [https://consensys.io/diligence/audits/2023/06/linea-plonk-verifier/](https://consensys.io/diligence/audits/2023/06/linea-plonk-verifier/)
- Message Service & Rollup: [https://consensys.io/diligence/audits/2023/06/linea-message-service/](https://consensys.io/diligence/audits/2023/06/linea-message-service/)
- Canonical Token Bridge:
[https://consensys.io/diligence/audits/2023/06/linea-canonical-token-bridge/](https://consensys.io/diligence/audits/2023/06/linea-canonical-token-bridge/)

__Open Zeppelin:__ 

  - Linea Bridge Audit: https://blog.openzeppelin.com/linea-bridge-audit-1
  - Linea Verifier Audit: https://blog.openzeppelin.com/linea-verifier-audit-1 

__2nd Audit Round__

__Diligence:__

- Proof aggregation, data compression and message service updates audit: [https://consensys.io/diligence/audits/2024/01/linea-contracts-update/](https://consensys.io/diligence/audits/2024/01/linea-contracts-update/)

__Open Zeppelin:__ 

- Proof aggregation, data compression and message service updates audit: [https://blog.openzeppelin.com/linea-v2-audit](https://blog.openzeppelin.com/linea-v2-audit)

__3rd Audit Round__

__Open Zeppelin__ 
- Blob submission audit: [https://blog.openzeppelin.com/linea-blob-submission-audit](https://blog.openzeppelin.com/linea-blob-submission-audit) 

__4th Audit Round__

__Open Zeppelin__
- Gas optimization and token bridge update audit: [https://blog.openzeppelin.com/linea-gas-optimizations-audit](https://blog.openzeppelin.com/linea-gas-optimizations-audit)  

__Cyfrin__ 
- Full codebase audit including recent gas optimizations and TokenBridge updates: [https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2024-05-24-cyfrin-linea-v2.0.pdf](https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2024-05-24-cyfrin-linea-v2.0.pdf) 

__5th Audit Round (latest)__

__Diligence__
- LineaRollup, L2MessageService and TokenBridge Granular Role Updates: https://diligence.consensys.io/audits/2024/12/linea-rollup-update/

__OpenZeppelin__
- LineaRollup, L2MessageService and TokenBridge Granular Role Updates: https://blog.openzeppelin.com/linearollup-and-tokenbridge-role-upgrade

__Cyfrin__
- LineaRollup, L2MessageService and TokenBridge Granular Role Updates: https://github.com/Cyfrin/cyfrin-audit-reports/blob/642b409c207d0e31679467480c3d9b8797b98696/reports/2025-01-06-cyfrin-linea-v2.2.pdf


__Proof of Concept (PoC) Requirements__

A PoC is required for the following severity levels:
- Smart Contract - Critical
- Smart Contract - High
- Smart Contract - Medium
- Smart Contract - Low

All PoCs submitted must comply with the Immunefi-wide [PoC Guidelines and Rules.](https://immunefisupport.zendesk.com/hc/en-us/articles/9946217628561-Proof-of-Concept-PoC-Guidelines-and-Rules) Bug report submissions without a PoC when a PoC is required will not be provided with a reward.

__Reward Payment Terms__

Payouts are handled by the ConsenSys team directly and are denominated in USDC.