Immunefi
Blog
Platform
Bug Bounty ProgramsPR ReviewsAuditsAudit CompetitionsInvite OnlySafe HarborVaultsManaged TriageHelp Center
Security Researchers

Join Immunefi

Find bugs. Get paid.

Immunefi Profile PicImmunefi StudioHacker PledgingHelp for WhitehatsAll StarsLearnLeaderboardImmunefi Top 10 BugsWhitehat Hall of FameCompetition FindingsResponsible Publication
Token
FoundationInstitutionalDocsIR ContactBuy IMU
LoginExplore BountiesGet a Quote
Back to Explore
Money on Chain / RIF on Chain-logo

Money on Chain / RIF on Chain

|

The Money on Chain - RIF on Chain bounty program covers two dual-token stablecoin protocols within one shared smart-contract ecosystem in the Rootstock blockchain.

Money on Chain uses RBTC collateral, while RIF on Chain uses RIF collateral. Each aims to provide a fully on-chain, censorship-resistant, USD-pegged and overcollateralized stablecoin, alongside low-maintenance, cost-efficient leveraged exposure for long-term holders of its respective collateral asset.

Both protocols are governed through the MOC token and share core governance, oracle, fee-flow, and supporting contracts.

RSK
Defi
Stablecoin
Staking
Solidity
Python
Typescript
Maximum Bounty
$10,000
Live Since
14 January 2021
Last Updated
20 August 2026

  • Step-by-step PoC Required

  • KYC required

Submit a Bug
InformationScopeResources

Codebase

Title
The main live Money on Chain contract.
Description
It's a legacy codebase, unlike the new multi-collateral Rif On Chain, this is single peg and single collateral. Parts of this contract have been disabled by configuration parameters.
Link
Title
Dapp version 3
Description
This is the UI for both protocols, styled and configured differently for each one.
Link
Title
Stable Protocol Queue Automator V3
Description
Current deferred queue-operation executor.
Link
Title
Stable Protocol Automator V3
Description
Current periodic protocol-operation executor.
Link
Title
MoC Periphery
Description
Auxiliary contracts and shared interfaces.
Link
Title
Governance Proposal Changers
Description
One-time governance changer contracts with deployment and validation tooling.
Link
Title
Areopagus Governance
Description
Governance and versioning smart contracts.
Link
Title
Price Oracle Interfaces
Description
Shared interfaces for calculated and price-oracle contracts.
Link
Title
MoC Prices Source
Description
Price-source library and integrations.
Link
Title
OMoC Node
Description
Off-chain decentralized-oracle node software.
Link
Title
MoC Decentralized Oracle
Description
On-chain decentralized-oracle contracts and price-pair publication.
Link
Title
RIF on Chain Protocol
Description
RIF on Chain deployment, integration, and protocol-specific smart-contract code.
Link
Title
Stable Protocol Core
Description
Shared multi-collateral stable-protocol smart contracts.
Link
Title
The MoC decentralized app
Description
Legacy RBTC-backed Money on Chain protocol smart contracts.
Link
Go to Audits & Known Issues
Assets Body

Our program is primacy of impact, so other contracts may be in scope, but you must check the contracts you reference are still in use. Also, we have disabled vulnerable or unsupported functionality via contract configuration, to avoid redeployment. Reports on those functions are out of scope, as if the functions did not exist, see the "Additional Out Of Scope" information section for more details.