Immunefi
Maple-logo

Maple

|

Founded in 2019, Maple was built on the belief that capital markets should be more transparent, efficient, and accessible – and that lending, the foundation of finance, could evolve beyond legacy infrastructure and closed systems.

We launched and built during a time of deep skepticism. Institutions kept their distance, markets were volatile, and regulation was unclear.

Today, Maple has originated $19.72B in loans and reached $4.24B AUM, bringing institutional-quality products to the crypto ecosystem.

But we're not here to replicate the past. We're here to shape what comes next. A financial system that's open by design and aligned with the speed and flexibility of modern markets.

Where access is broader, trust is built-in, and capital moves with greater purpose.

Maple is Asset Management. Onchain. And we're just getting started.

ETH
Defi
Lending
JavaScript
Solidity
Maximum Bounty
$500,000
Live Since
25 January 2022
Last Updated
11 November 2026
  • PoC Required

  • KYC required

Codebase

Title
Maple Core V2 - Mono Repo
Description
Contains all relevant sub modules that make up the production smart contracts of the Maple Protocol. Links to each submodule can be found under the modules folder where the smart contracts exist.
Link

Documentation

Title
Maple Documentation
Description
Please ensure to read the protocol docs and security section before submitting any relevant findings.
Link
Go to Audits & Known Issues
Assets Body

All contracts listed above are in scope, as well as all proxy and contract instances deployed from all factories. Though only the proxy contracts are listed as in-scope, current implementation and any further updates to the implementation contracts are considered in scope. When reporting a bug, please make sure to select the relevant proxy smart contract as the target.

All contracts that are marked as “(For reference)” are instances of contracts that have been deployed by protocol factories and are in scope for the audit. Note some contracts are queued for deprecation and are now out of scope. All other instances that are deployed in the same fashion are in scope of the audit, including:

  • Loan (Open-Term)
  • LoanManager (Open-Term)
  • Pool
  • PoolManager
  • WithdrawalManager (Queue)
  • Modular Allocation, Aave and Sky strategies.