![Tokemak-logo](/_next/image/?url=https%3A%2F%2Fimages.ctfassets.net%2Ft3wqy70tc3bv%2F6k60oMMHjDXQQ6lY5LA8mf%2F9ac1ddab3bc903d1c2df1c9a94d65f0d%2FTokemak.jpeg&w=128&q=75)
Tokemak
Tokemak is a decentralized liquidity providing/market making protocol designed to create efficient, sustainable liquidity across DeFi.
PoC required
Resources & Documentation
However, only those in the table are considered as in-scope of the bug bounty program.
All following known issues, as well as those in past audit reports https://docs.tokemak.xyz/protocol-information/network-security, are considered out-of-scope of this bug bounty program:
- Centralized backend entity
- For loop not capped, can have excessive gas consumption
- Different Solidity versions
- ERC20 allowance double spend exploit
- Unsafe cycle durations
- Possibility of sandwich attacks during liquidity deployments
- Schedule.setup check in the Staking contract always passes it
If an impact can be caused to any other asset managed by Tokemak that isn’t on this table but for which the impact is in the Impacts in Scope section below, you are encouraged to submit it for the consideration by the project. This only applies to Critical impacts.
For further reference, the relevant GitHub can be found at https://github.com/Tokemak/contracts-v1/tree/main. However, only those in the Assets in Scope table are considered as in-scope of the bug bounty program.