Mento-V3

Mento-V3

@Mento-Labs
Live
Instructions

Total reward

$60,000

No deposit required

Status

Live

Findings submitted

6

Start date

26 Nov 2025

End date

17 Dec 2025

KYC

Required to join

Mento V3 is an evolution of the Mento Protocol, transitioning from a Reserve-backed stablecoin and swap protocol to a CDP-backed decentralized Foreign Exchange (FX) protocol. V3 enables fixed-price stablecoin swaps through a novel type of market maker contract, the FPMM (Fixed Price Market Maker), liquidity management through rebalancing strategies, and user-driven stablecoin minting through CDPs. The CDP system is based on an official Liquity v2 fork and has been upgraded to integrate seamlessly into the Mento Protocol.

Prize distribution and scoring

Documentation

Scope

In scope Files:

  • bold:

    • including new contract & unchanged contracts and excluding deleted files:

      • diff : https://github.com/mento-protocol/bold/pull/17/files or

      • branch: https://github.com/mento-protocol/bold/tree/feat/mento-v3/contracts/src

        • contracts/src/Dependencies/AddRemoveManagers.sol
        • contracts/src/Dependencies/AggregatorV3Interface.sol
        • contracts/src/Dependencies/Constants.sol
        • contracts/src/Dependencies/LiquityBase.sol
        • contracts/src/Dependencies/LiquityBaseInit.sol
        • contracts/src/Dependencies/LiquityMath.sol
        • contracts/src/Dependencies/Ownable.sol
        • contracts/src/PriceFeeds/FXPriceFeed.sol
        • contracts/src/Types/BatchId.sol
        • contracts/src/Types/LatestBatchData.sol
        • contracts/src/Types/LatestTroveData.sol
        • contracts/src/Types/TroveChange.sol
        • contracts/src/Types/TroveId.sol
        • contracts/src/ActivePool.sol
        • contracts/src/AddressesRegistry.sol
        • contracts/src/BatchManagerOperations.sol
        • contracts/src/BorrowerOperations.sol
        • contracts/src/CollateralRegistry.sol
        • contracts/src/CollSurplusPool.sol
        • contracts/src/DefaultPool.sol
        • contracts/src/GasPool.sol
        • contracts/src/HintHelpers.sol
        • contracts/src/MultiTroveGetter.sol
        • contracts/src/SortedTroves.sol
        • contracts/src/StabilityPool.sol
        • contracts/src/SystemParams.sol
        • contracts/src/TroveManager.sol
        • contracts/src/TroveNFT.sol

  • core v3 :

    • diff: https://github.com/mento-protocol/mento-core/pull/631 or

    • branch: https://github.com/mento-protocol/mento-core/tree/feat/mento-v3

      • contracts/libraries/LiquidityStrategyTypes.sol
      • contracts/libraries/TradingLimitsV2.sol
      • contracts/liquidityStrategies/CDPLiquidityStrategy.sol
      • contracts/liquidityStrategies/LiquidityStrategy.sol
      • contracts/liquidityStrategies/ReserveLiquidityStrategy.sol
      • contracts/oracles/OracleAdapter.sol
      • contracts/oracles/breakers/MarketHoursBreaker.sol
      • contracts/swap/router/Router.sol
      • contracts/swap/virtual/VirtualPool.sol
      • contracts/swap/virtual/VirtualPoolFactory.sol
      • contracts/swap/FPMM.sol
      • contracts/swap/FPMMFactory.sol
      • contracts/swap/FPMMProxy.sol
      • contracts/swap/FactoryRegistry.sol
      • contracts/swap/OneToOneFPMM.sol
      • contracts/swap/ReserveV2.sol
      • contracts/tokens/StableTokenV3.sol
      • contracts/tokens/StableTokenSpoke.sol

Build Instructions

cd mento-coreyarnforge installforge build
cd ../bold/contractsforge installforge build

Out of scope

  • Previous security reports:

    • ChainSecurity Report 1

    • Chainsecurity Report 2

    • Expected behaviors such as trusted/untrusted roles and/or any accepted risks

      • Owner/Governance should be trusted
      • Liquidity Strategies are gonna be developed by only us and should be assumed trusted

Basic POC test

Contact Us

For any issues or concerns regarding this competition, please reach out to the Cantina core team through the Cantina Discord.