solayer-bridge
Total reward
$50,000
Status
Live
Findings submitted
2
Start date
15 Aug 2025
End date
24 Aug 2025
KYC
Required to join
The Solayer Bridge (sBridge) is a canonical, SVM-native cross-chain bridge specifically designed to securely transfer assets and execute cross-chain transactions between Solana and Solayer environments. Unlike generic multichain bridges, sBridge is tightly aligned with the Solana Virtual Machine (SVM) execution semantics, enhancing interoperability, performance, and security.
To participate in this competition please sign the following NDA: Solayer NDA
Prize distribution and scoring
-
Total Prize Pool: $60,000
-
Public Pool: $50,000
-
Additional pay for dedicated Cantina researcher: $10,000
Scoring described in the competition scoring page.
Findings Severities described in detail on our docs page.
Documentation
- https://dev-docs.solayer.org/docs/solayer-bridge/introduction Rest can be found in the repo
Samples:
-
Solana native token -> Solayer https://explorer.solana.com/tx/4cCdffiKJgXxS7haqGiFbaPAcP7bNfSaUZLjZywTpP3koiBxrnfyrrS9KwoDeMTjCCxiUaoCT7nvXvYXvCLBc1Hs?cluster=devnet https://explorer.solayer.org/tx/4fiJCxfJ7Xa11hTEEQ9p2JeNF6TxtqZUu3BoVD5Fky5LwtgwuzVVQZ6vqECBpp4wdi3iqjJshmJEVfWgEQ4YXAPA
-
Solayer -> Solana native token https://explorer.solayer.org/tx/4iaGhtaM7mBLeQR4gohiZHmkiMteMczNXUXCXgNxPRWj44LmD7euRW8iL33weRiJyP6SwexrqBW6RpKeT9dfdSm7 https://explorer.solana.com/tx/4rZLcf52Lm4c4NAL4P8KykaUy1eaLP1pQLUJ2yXRN2YBcuhG39qtvNvhYL7JqtWvGyVwbbfnfzzMWcC6dfAQeHo8?cluster=devnet
-
Solayer native token -> Solana https://explorer.solayer.org/tx/3oVNCqVDZfZ4PhH8Ew16ffou2YfK96jurpgKNBx7hndjqe48q4AXSxjMc8CoqkLX2WUxr71Ncc2UWg5V6jnP3wjZ https://explorer.solana.com/tx/35SEv27yDcTBtW4ZEjFDosgD1NBBkcy2U3xTB8dWQBizHFsV9dXk3FkeaST8T1cRHuR2RAgGm77UvNpYzjsY3May?cluster=devnet
-
Solana -> Solayer native token https://explorer.solana.com/tx/4HAgB9cL1Q7xn2NtP3bs5zSDWSYKwdqTwbgTQiQyhrmWh53B4gaparAfdmqfGthFHS3TPxd3DDAKvuaFupNxnQwu?cluster=devnet https://explorer.solayer.org/tx/4kbFEHYjJU3ZBmBdE7kt3aZjsi7D5Hbr67huMvcvdJ9xgDinDBXjwGJ8HVtnvaMAQJN4Adbsw3JPdsN47R4sGqqB
-
Solayer SOL -> Solana https://explorer.solayer.org/tx/2VLVHaYkLZMESAH3TfchjJt3SyuPZk4PDADEhtWrQmxLk6KNte7WyPQAqFzAK936wj8sPqUGyfUdGEZxrKaSpZXu
- Solana SOL -> Solayer https://explorer.solayer.org/tx/2Yu2ZUnhuuyaQSJfV413dkBdTVvypBCC8edHhzRHVSdbtWZqqmcXWNQnRdYAvXazLUc9Syh8an7pAXtoBTVT7R5h https://explorer.solana.com/tx/BNv2LsZx7thqzPq13QZm8zgnQ5WxhCrJvHdxokULwKoKL8yhge72QrSsacEcvK99eDMqFnd7JWSr1np2xMY8PhH?cluster=devnet
Scope
- Repository: https://cantina.xyz/code/0f543452-2076-438f-86ae-bbd6b065fffb/
- Total LOC: 2071
- Files: All rust file
Build Instructions
- Solana: Anchor build/anchor deploy
- Solayer: anchor build – –features solayer
You should not need to deploy anything on solayer as we do require a special build of solana binary to deploy. You can test on solana instead, or test on the deployed bridges
The deployed bridge handler is: 3V5J2eG4aSLU4Ld49YjY6JJLHVgA4mMNLZRVGM1vEQ6n
on both solana and solayer chain
Out of scope
- Known Issues
- Expected behaviors
- Manager role is trusted
- All logging are intended
- Expected behaviors
Basic POC test
Mandatory POC rule applies for this competition
Contact Us
For any issues or concerns regarding this competition, please reach out to the Cantina core team through the Cantina Discord.