Stability DAO / stability-contracts competition

Stability is a multi-chain DeFi platform that enables users to deploy capital into vaults with specialized yield-generating strategies. The platform handles the complexity of DeFi protocols, allowing users to earn yields while the system manages the underlying operations, including position management, compounding, and fee distribution.

Prize distribution and scoring

Total Prize Pool: $ 16,000
Additional reward for Cantina Dedicated Researcher: $2,000
Scoring described in the competition scoring page.
Findings Severities described in detail on our docs page.

Documentation

Scope

Repository: https://github.com/stabilitydao/stability-contracts
Total LOC: 1624
Commeit: f8f4779f8850d7750c86f866a45a0d864e5a7499
Files:
- src/core/vaults/MetaVault.sol
- src/core/vaults/WrappedMetaVault.sol
- src/core/vaults/CVault.sol
- src/core/base/VaultBase.sol
- src/core/libs/VaultBaseLib.sol
- src/strategies/SiloStrategy.sol
- src/strategies/base/ERC4626StrategyBase.sol
- src/strategies/base/StrategyBase.sol

Build Instructions

git clone https://github.com/stabilitydao/stability-contracts.git && cd stability-contractsforge installforge buildforge test -vv

Out of Scope

Underlying LP reserves/price manipulation.
- MetaVaults not used with LPs now, only single sided lending strategies.
Not trusted asset price.
- All assets prices are trusted (extracted from oracles). Initial vault audit v24.01.1-alpha
Automated findings by LightChaser
- https://gist.github.com/ChaseTheLight01/79e17cbb4c8ab49a261c9755bf98261c

POC Test

Mandatory POC rule applies for this competition
Example of forking test can be found at test/core/MetaVault.Upgrade2.Sonic.t.sol

Contact Us

For any issues or concerns regarding this competition, please reach out to the Cantina core team through the Cantina Discord.

Stability DAO / stability-contracts