Tenbin Bug Bounty

@tenbin

LiveCantina-Triaged

Maximum reward

$40,000

Severity

Max. Reward

Critical

$40,000

High

$15,000

Medium

$5,000

Low

$1,000

Deposit required

$50

Findings submitted

Start date

11 Sep 2026

KYC

Required to join

Please sign in as a researcher to join the bounty.

Instructions Scope

In scope

Core Smart Contracts

Severity

Min and Max Reward

Critical

$20,000 to $40,000

High

$7,500 to $15,000

Medium

$2,000 to $5,000

Low

$500 to $1,000

All Solidity files under src/ in the tenbin-contracts repository at commit 031df2d, approximately 3,801 lines of code. This covers the core protocol contracts and oracle adapters listed below, plus the interfaces under src/interface/. See the Out of Scope group for exclusions.

Name	Description	Asset
AssetSilo.sol	`src/AssetSilo.sol`	031d…65cd
AssetToken.sol	`src/AssetToken.sol`	031d…65cd
CollateralManager.sol	`src/CollateralManager.sol`	031d…65cd
Controller.sol	`src/Controller.sol`	031d…65cd
CustodianModule.sol	`src/CustodianModule.sol`	031d…65cd
MultiCall.sol	`src/MultiCall.sol`	031d…65cd
RevenueModule.sol	`src/RevenueModule.sol`	031d…65cd
StakedAsset.sol	`src/StakedAsset.sol`	031d…65cd
SwapModule.sol	`src/SwapModule.sol`	031d…65cd
BRLOracleAdapter.sol	`src/oracle/BRLOracleAdapter.sol`	031d…65cd
ChainlinkOracleAdapter.sol	`src/oracle/ChainlinkOracleAdapter.sol`	031d…65cd
ChainlinkOracleWrapper.sol	`src/oracle/ChainlinkOracleWrapper.sol`	031d…65cd
GoldOracleAdapter.sol	`src/oracle/GoldOracleAdapter.sol`	031d…65cd
MXNOracleAdapter.sol	`src/oracle/MXNOracleAdapter.sol`	031d…65cd

Out of scope

Default Out of Scope

Standard out-of-scope items per the Cantina Bug Bounty Out-of-Scope Policy.

Out of Scope

The following are out of scope and not eligible for rewards.

For generic exclusions, see the Cantina Bug Bounty Out-of-Scope Policy.

Excluded code

Third-party integration code under src/external/** (1inch, Bebop, Chainlink, Merkl and Morpho adapters and interfaces)
Informational findings are accepted but are not rewarded