pike-tapio-monrepo
Total reward
$35,000
Status
Escalations
Findings submitted
573
Start date
14 Jul 2025
End date
4 Aug 2025
Pike Market Protocol
Pike Market is a decentralized lending and borrowing protocol built for EVMs, designed to provide a secure, scalable, and flexible environment for users to manage their digital assets. It allows users to supply assets to earn yield or borrow against collateralized assets through the pToken
contracts.
Tapio Protocol Tapio is an asset protocol that enables the creation of Self-Pegging Assets (SPAs) through advanced StableSwap AMM. Tapio features sophisticated governance mechanisms, dynamic fee structures, and built-in risk management systems, all accessible through a suite of interconnected smart contracts designed for seamless integration.
Prize distribution and scoring
-
Total Prize Pool: $40,000
- Public Pool: $35,000
- Dedicated Researcher: $5,000
Scoring and severity definitions follow Cantina standards:
Documentation
Official docs
- Pike — https://docs.pike.finance
- Tapio — https://docs.tapio.finance
Repositories
Walk-through videos
- Pike — pike-walkthrough.mp4
- Tapio — tapio-walkthrough.mp4
Scope
In Scope
Pike Protocol
-
Repo: https://cantina.xyz/code/a0806644-7d91-457a-a08d-aee2db73f352/README.md
-
LOC: 1,731
-
Files:
src/pike-market/modules/pToken/PTokenModule.sol
src/pike-market/modules/riskEngine/RiskEngineModule.sol
src/pike-market/modules/interestRateModel/DoubleJumpRateModel.sol
src/oracles/OracleEngine.sol
Tapio Protocol
-
Commit:
a6695ca
(tagv1.0.0
) -
LOC: 1,257
-
Files:
src/SelfPeggingAsset.sol
src/SelfPeggingAssetFactory.sol
src/LPToken.sol
Out of Scope
-
MixBytes audits
-
Fuzzland audit
-
Automated Findings by LightChaser: https://gist.github.com/ChaseTheLight01/c3dbb47495eedc5cdb3ac4383f41f653
Build instructions
# Applies to both protocolsgit clone https://github.com/nutsfinance/<protocol>.gitcd <protocol>git checkout v1.0.0forge buildforge test
Basic POC test
- Mandatory POC rule applies for this competition
- Pike — test/fork/General.t.sol
- Tapio — test/SPAToken.t.sol#L8-L41
Contact
For any competition-related questions, please reach out in Cantina Discord: https://discord.cantina.xyz