All smart contracts of StellaSwap can be found at [https://github.com/stellaswap/core](https://github.com/stellaswap/core). However, only those in the Assets in Scope table are considered as in-scope of the bug bounty program.

StellaSwap is the leading DEX on Moonbeam that offers an integrated gateway to the DeFi world. A hybrid DEX by design with both a standard and stable AMM, StellaSwap aims to provide the most secure and optimal trading experience for all users. With a strong focus on simplifying the user experience, StellaSwap’s design principles is predicated on abstracting DeFcomplexities

Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield

Permanent freezing of funds

Temporary freezing of funds for at least 3 days

Rewards are distributed according to the impact of the vulnerability based on the [Immunefi Vulnerability Severity Classification System V2.2](https://immunefi.com/immunefi-vulnerability-severity-classification-system-v2-2). This is a simplified 5-level scale, with separate scales for websites/apps, smart contracts, and blockchains/DLTs, focusing on the impact of the vulnerability reported.

All bug reports must come with a suggestion for a fix in order to be considered for a reward.

All issues previously highlighted in the following audit reports are also considered out of scope: 
  - [Certik Full Audit Report](https://2598174527-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fk79kvXbQmvjLmP78Scbp%2Fuploads%2Ft3l7dQ9CV3XBe5ByzBWo%2FCertik%20Full%20Audit.pdf?alt=media&token=28f17b42-930a-489d-90cc-39ba517235ea)
  - [https://www.certik.com/projects/stellaswap](https://www.certik.com/projects/stellaswap) 
  - [https://github.com/solidproof/smart-contract-audits/blob/main/SmartContract_Audit_Solidproof_StellaSwap.pdf](https://github.com/solidproof/smart-contract-audits/blob/main/SmartContract_Audit_Solidproof_StellaSwap.pdf) 
  - [https://github.com/solidproof/projects/tree/main/StellaSwap](https://github.com/solidproof/projects/tree/main/StellaSwap) 
  - [SolidProof Stable AMM Audit Report](https://2598174527-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fk79kvXbQmvjLmP78Scbp%2Fuploads%2FmMbSu0hMsw6p30u3UcEZ%2FSmartContract_Audit_Solidproof_StellaSwap_Stable%20AMM.pdf?alt=media&token=855c69b6-dc9a-4a9f-a512-91a47cd647db) 

Payouts are handled by the __StellaSwap__ team directly and are denominated in USD. However, payouts are done in __STELLA__.  Rewards for High severity bug reports are vested monthly over a 6-month period. Rewards for Critical severity bug reports are vested monthly over a 12-month period.


StellaSwap

Resources & Documentation