Tensor / tensor-monorepo

The Tensor Foundation protocol is a group of Solana programs (smart contracts) that allow trading Solana NFTs and digital assets in a permissionless and decentralized manner. The following programs are part of the protocol:

• AMM – An automated market maker program that allows creating liquidity pools of NFTs and bids for NFTs.
• Marketplace – A traditional NFT marketplace that allows listing NFTs for sale and putting up bids on specific NFTs or collection-based bids.
• Escrow – A program that handles shared escrow accounts to allow AMM and Marketpalce bids to use shared liquidity.
• Fees – A program for handling sharded fee accounts for the protocol.
• Whitelist – Allows creating and managing NFT and digital asset collections.

Prize distribution and scoring

• Total Prize Pool: $150,000

• Primary Prize Pool: $145,000

• The prize distribution has 2 possible triggers:

  • If one or more valid medium severity findings are found, the total pot size is $40,000
  • If one or more valid high severity findings are found, the total pot size is $150,000

• $5,000 of the prize pot is reserved for Low Severity findings. These reports are judged based on quality and reviewers are then ranked from 1st to 5th for the purpose of prize allocation.

  • 1st: $2.5k
  • 2nd: $1k
  • 3rd: $500
  • 4th: $500
  • 5th: $500

• Scoring described in the competition scoring page.

• Findings Severities described in detail on our docs page.

Documentation

• tensor_amm
• tensor_escrow
• tensor_marketplace
• tensor_whitelist

Scope

Monorepo of all the following repos: link

Respository: AMM
Commit: 268c97fc8f6a997025cd23e15f75057c6b7e3d16
LOC: 3600 lines of Rust smart contract code
Files: program/

Respository: Escrow
Commit: 1ace7e4fdb9833054360014ff3318de7e699e1c6
LOC: 460 lines of Rust smart contract code
Files: program/

Respository: Fees
Commit: 7c2ee60f146165afa9fc1619525ef980869465aa
LOC: 84 lines of Rust smart contract code
Files: program/

Respository: Marketplace
Commit: ac3608273b9bd449b3c6770597ce095e2952043e
LOC: 7400 lines of Rust smart contract code
Files: program/

Respository: Toolbox
Commit: a1e10abfb9095a631737009ddeb106157290b674
LOC: 1700 lines of Rust code
Files: toolbox/

Respository: Whitelist
Commit: bff5180a28276f23a913180b567aabcf0eb524c1
LOC: 1900 lines of Rust smart contract code
Files: program/

Build Instructions

• Build and test instructions provided in the project READMEs.

Out of scope

• Previous security reports
• Any findings that involve frontrunning edit_pool on the marketplace program will be considered out-of-scope.

• Automated findings by Lightchaser

Contact Us

For any issues or concerns regarding this competition, please reach out to the Cantina core team through the Cantina Discord.