Ammalgam Bug Bounty

@ammalgam

Live

Maximum reward

$25,000

Severity

Max. Reward

Critical

$25,000

High

$10,000

Deposit required

$50

Findings submitted

Start date

9 Jul 2026

Please sign in as a researcher to join the bounty.

Instructions Scope

In scope

Smart Contracts

Severity

Min and Max Reward

Critical

Up to $25,000

High

Up to $10,000

The Ammalgam DLEX core protocol smart contracts, deployed on Ethereum mainnet. All contract-level vulnerabilities in the deployed contracts listed below are in scope.

Name	Description	Asset
Interest	Ammalgam DLEX contract deployed on Ethereum mainnet.	0xe6ce…80b1
Validation	Ammalgam DLEX contract deployed on Ethereum mainnet.	0xe61a…f72e
Liquidation	Ammalgam DLEX contract deployed on Ethereum mainnet.	0xeaae…ba1f
TimelockController	Ammalgam DLEX contract deployed on Ethereum mainnet.	0x59ec…eef8
SaturationAndGeometricTWAPState	Ammalgam DLEX contract deployed on Ethereum mainnet.	0x126d…dc88
TransparentUpgradeableProxy	Ammalgam DLEX contract deployed on Ethereum mainnet.	0xaac0…d9fc
AmmalgamPair	Ammalgam DLEX contract deployed on Ethereum mainnet.	0x1b72…6b67
PairLockedLoans	Ammalgam DLEX contract deployed on Ethereum mainnet.	0x06dc…521c
PairBlockLendingFundRemoval	Ammalgam DLEX contract deployed on Ethereum mainnet.	0xe824…6856
PairFrozen	Ammalgam DLEX contract deployed on Ethereum mainnet.	0xbae0…445e
BeaconController	Ammalgam DLEX contract deployed on Ethereum mainnet.	0x7cca…27dd
HookRegistry	Ammalgam DLEX contract deployed on Ethereum mainnet.	0xf519…e329
ERC20LiquidityTokenFactory	Ammalgam DLEX contract deployed on Ethereum mainnet.	0xbc5f…8e64
ERC4626DepositTokenFactory	Ammalgam DLEX contract deployed on Ethereum mainnet.	0x67c0…a937
ERC4626DebtTokenFactory	Ammalgam DLEX contract deployed on Ethereum mainnet.	0x9293…c08e
ERC20DebtLiquidityTokenFactory	Ammalgam DLEX contract deployed on Ethereum mainnet.	0x2ce8…698c
AmmalgamFactory	Ammalgam DLEX contract deployed on Ethereum mainnet.	0x1a41…015b
PeripheralLending	Ammalgam DLEX contract deployed on Ethereum mainnet.	0x4be3…4bc2

Out of scope

Out of Scope

The following are considered known issues and are not eligible for rewards. For generic exclusions, see the Cantina Bug Bounty Out-of-Scope Policy.

Any issue that does not result in an on-chain loss of funds
Informational findings and design choices related to the protocol
Issues that are ultimately user errors and can easily be caught in the frontend (for example, transfers to address(0))
Rounding errors and off-by-one behavior in the ERC-4626 helper interfaces that do not result in a loss of funds
Relatively high gas consumption
Loss of funds resulting from violent market price movements, specifically any price increase greater than 33% or price decrease greater than 25% within a single block or 8-second period

Default Out of Scope

Standard out-of-scope items per the Cantina Bug Bounty Out-of-Scope Policy.