Mezo Bug Bounty
Maximum reward
75,000 USD (in Mezo)
Severity
Max. Reward
Critical75,000 USD (in Mezo)
High40,000 USD (in Mezo)
Deposit required
$50
Findings submitted
398
Start date
13 May 2026
KYC
Required to join
Please sign in as a researcher to join the bounty.
Log inIn scope
Severity
Min and Max Reward
Critical40,000 USD (in Mezo) to 75,000 USD (in Mezo)
High
10,000 USD (in Mezo) to 40,000 USD (in Mezo)
Solidity contract files, validator infrastructure, and supporting documentation for the Mezo protocol. See contract addresses and audit reports for additional context.
Special Focus Areas
- MUSD lending/borrowing logic and stablecoin issuance
- Cross-chain bridge integrations (Wormhole NTT) for MUSD and MEZO token
- veBTC/veMEZO locking, voting, pools, and vault accounting
- Validator and consensus configuration
Name | Description | Asset |
|---|---|---|
| musd | MUSD lending/borrowing smart contracts | |
| validator-kit-Out of scope | - | |
| documentation-out-of-scope | - | |
| mezod | Mezo validator client | |
| mezod | Mezo chain node implementation | |
| MezoBridge | Smart contract on Ethereum | 0xF6…908c |
| BTC token (precompile) | Precompile on Mezo | 0x7b…0000 |
| MEZO token (precompile) | Precompile on Mezo | 0x7b…0001 |
| ValidatorPool (precompile) | Precompile on Mezo | 0x7b…0011 |
| AssetsBridge (precompile) | Precompile on Mezo | 0x7b…0012 |
| Maintenance (precompile) | Precompile on Mezo | 0x7b…0013 |
| Upgrade (precompile) | Precompile on Mezo | 0x7b…0014 |
| PriceOracle (precompile) | Precompile on Mezo | 0x7b…0015 |
| mcbBTC | Smart contract on Mezo | 0x6a…c5d7 |
| mT | Smart contract on Mezo | 0xaa…b71F |
| mUSDC | Smart contract on Mezo | 0x04…c197 |
| mUSDT | Smart contract on Mezo | 0xeB…bB8E |
| ActivePool | Smart contract on Mezo | 0x30…4876 |
| BorrowerOperations | Smart contract on Mezo | 0x44…e031 |
| BorrowerOperationsSignatures | Smart contract on Mezo | 0xB5…df7a |
| CollSurplusPool | Smart contract on Mezo | 0xBF…F491 |
| DefaultPool | Smart contract on Mezo | 0xE4…7c8B |
| GasPool | Smart contract on Mezo | 0x3E…1Bc1 |
| GovernableVariables | Smart contract on Mezo | 0x56…d389 |
| HintHelpers | Smart contract on Mezo | 0xD2…7DC3 |
| InterestRateManager | Smart contract on Mezo | 0x4a…8285 |
| MUSD | Smart contract on Mezo | 0xdD…F186 |
| PCV | Smart contract on Mezo | 0x39…B993 |
| PriceFeed | Smart contract on Mezo | 0xc5…cA88 |
| SortedTroves | Smart contract on Mezo | 0x8C…749f |
| StabilityPool | Smart contract on Mezo | 0x73…0e32 |
| TokenDeployer | Smart contract on Mezo | 0x25…495E |
| TroveManager | Smart contract on Mezo | 0x94…c193 |
| Balance | Smart contract on Mezo | 0x40…a90b |
| BaseRemoteGaugeRegistry | Smart contract on Mezo | 0x82…9539 |
| BoostVoter | Smart contract on Mezo | 0x2B…13d1 |
| BtcMusdcMorphoOracle | Smart contract on Mezo | 0xeA…48d1 |
| BullishEnclave | Smart contract on Mezo | 0x4d…fB99 |
| BullishTimelock | Smart contract on Mezo | 0x16…036A |
| ChainFeeDistributor | Smart contract on Mezo | 0xb5…74A2 |
| ChainFeeSplitter | Smart contract on Mezo | 0x02…7AA3 |
| ClaimAndLockHandler | Smart contract on Mezo | 0xFa…Bf77 |
| CLFactory | Smart contract on Mezo | 0xBB…Eb79 |
| CLGauge (implementation) | Smart contract on Mezo | 0x8f…9c33 |
| CLGaugeFactory | Smart contract on Mezo | 0xfc…Eb13 |
| CLPool (implementation) | Smart contract on Mezo | 0x81…3E5F |
| CLPositionLens | Smart contract on Mezo | 0x4c…760A |
| CLSwapRouter | Smart contract on Mezo | 0x37…6225 |
| Delegation | Smart contract on Mezo | 0x0E…5913 |
| EnclaveDebtManager | Smart contract on Mezo | 0x2C…389a |
| ERC4626VaultAdapter | Smart contract on Mezo | 0xd3…8788 |
| Escrow | Smart contract on Mezo | 0x1F…9125 |
| FactoryRegistry | Smart contract on Mezo | 0x04…4D32 |
| GaugeFactory | Smart contract on Mezo | 0x41…CCAd |
| Grant | Smart contract on Mezo | 0x6D…F8e7 |
| ManagedNFT | Smart contract on Mezo | 0xC5…c7D8 |
| ManagedRewardsFactory | Smart contract on Mezo | 0xeA…2216 |
| MEZOChainSplitter | Smart contract on Mezo | 0x5C…C5DA |
| MEZOChainSplitterGovernor | Smart contract on Mezo | 0x7F…4365 |
| MEZOEcosystemSplitter | Smart contract on Mezo | 0xe9…99FA |
| MEZOEcosystemSplitterGovernor | Smart contract on Mezo | 0xD6…8ECF |
| MezoForwarder | Smart contract on Mezo | 0xE6…7085 |
| MEZOMerkleClaimAndLockHandler | Smart contract on Mezo | 0x2B…c44B |
| MEZOMerkleDistributor | Smart contract on Mezo | 0xb9…E82d |
| MEZOMinter | Smart contract on Mezo | 0x66…ffc3 |
| MEZORebaseDistributor | Smart contract on Mezo | 0x07…6363 |
| MixedRouteQuoterV1 | Smart contract on Mezo | 0xC7…9327 |
| MorphoMarketV1AdapterV2 | Smart contract on Mezo | 0xb0…4F61 |
| MorphoVaultV2 | Smart contract on Mezo | 0x06…6a8B |
| MUSDProtocolFees | Smart contract on Mezo | 0x03…2499 |
| MUSDSavingsRate | Smart contract on Mezo | 0xb4…51CC |
| NFT | Smart contract on Mezo | 0xe9…E28B |
| NFTDescriptor | Smart contract on Mezo | 0x0D…bA41 |
| NonfungiblePositionManager | Smart contract on Mezo | 0x50…874c |
| NonfungibleTokenPositionDescriptor | Smart contract on Mezo | 0x81…FEcA |
| NonStakingGaugeEscrow | Smart contract on Mezo | 0x89…5e3D |
| NonStakingGaugeFactory | Smart contract on Mezo | 0x31…8d30 |
| Pool (implementation) | Smart contract on Mezo | 0xee…6cEF |
| PoolFactory | Smart contract on Mezo | 0x83…4248 |
| PoolsVoter | Smart contract on Mezo | 0x48…1f03 |
| QuoterV2 | Smart contract on Mezo | 0x4E…5dC7 |
| Router | Smart contract on Mezo | 0xAc…9Cd4 |
| SNFBridgeTimelock | Smart contract on Mezo | 0xa0…5478 |
| SNFEnclave | Smart contract on Mezo | 0x14…D786 |
| SNFExecutorTimelock | Smart contract on Mezo | 0x41…98a6 |
| StakingGaugeFactory | Smart contract on Mezo | 0xB8…E6D3 |
| SugarHelper | Smart contract on Mezo | 0x2C…6C4c |
| ThirdPartyVoter | Smart contract on Mezo | 0x2e…A6EB |
| TickLens | Smart contract on Mezo | 0x0d…cB76 |
| ValidatorsVoter | Smart contract on Mezo | 0xe9…515a |
| VeBTC | Smart contract on Mezo | 0x3D…f279 |
| VeMEZO | Smart contract on Mezo | 0xb9…0122 |
| VotingRewardsFactory | Smart contract on Mezo | 0x30…DEc2 |
| YieldConverter | Smart contract on Mezo | 0x5a…d1c5 |
Out of scope
Out of Scope
The following issues are out of scope and not eligible for rewards.
For generic exclusions, see the Cantina Bug Bounty Out-of-Scope Policy.
Known Issues
- Informational findings, design choices related to protocol
- Issues that are ultimately user errors and can easily be caught in the frontend (e.g. transfers to
address(0)) - Rounding errors
- Relatively high gas consumption
- Extreme market turmoil vulnerability
Other Exclusions
- Previous security reports
- Expected behaviors such as trusted/untrusted roles and/or any accepted risks
- Impacts caused by attacks requiring access to privileged addresses (including, but not limited to governance multisigs and strategist contracts) without additional modifications to the privileges attributed
- Best practice recommendations
- Feature requests
Default Out of Scope
Standard out-of-scope items per the Cantina Bug Bounty Out-of-Scope Policy.