WE_PIGGY_PRICE_ORACLE_V1 (Implementation)

STABLECOIN_JUMP_RATE_MODEL (Implementation)

STABLECOIN_JUMP_RATE_MODEL(Implementation)

All smart contracts of WePiggy can be found at [https://github.com/WePiggy](https://github.com/WePiggy). However, only those in the Assets in Scope table are considered as in-scope of the bug bounty program.

WePiggy is an open source, non-custodial crypto asset lending market protocol. In WePiggy's market, users can deposit their crypto assets to earn interest, or borrow others by paying interests.

Loss of user funds staked (principal) by freezing or theft

Loss of governance funds

Shell access on server

Theft of unclaimed yield

Freezing of unclaimed yield for at least 24 hours

Rewards are distributed according to the impact of the vulnerability based on the [Immunefi Vulnerability Severity Classification System V2.2](https://immunefi.com/immunefi-vulnerability-severity-classification-system-v2-2). This is a simplified 5-level scale, with separate scales for websites/apps and smart contracts/blockchains, encompassing everything from consequence of exploitation to privilege required to likelihood of a successful exploit.

All web/app bug reports must come with a PoC with an end-effect impacting an asset-in-scope in order to be considered for a reward. Explanations and statements are not accepted as PoC and code is required. All bug reports must come with a suggestion for a fix to be considered for a reward.

All known issues highlight in the following audit reports are considered to be out-of-scope:
  - [https://github.com/WePiggy/wepiggy-contracts/tree/master/docs/audits ](https://github.com/WePiggy/wepiggy-contracts/tree/master/docs/audits)

WePiggy requires KYC to be done for all bug bounty hunters submitting a report and wanting a reward. The information needed are the name, affiliated company (if any) and an email address or Telegram handle.

In addition, WePiggy has the following requirements for bug bounty hunters to be eligible for rewards:
  - Be at least 18 years of age.
  - Be reporting in an individual capacity, or if employed by a company, reporting with the company's written approval to submit a disclosure to WePiggy.
  - Not be a current or former WePiggy employee, vendor, contractor, or employee of a WePiggy vendor or contractor.

Payouts are handled by the __WePiggy__ team directly and are denominated in USD. However, payouts are done in __USDC__.

WePiggy

Resources & Documentation