Security
Bug Bounty
Balancer's bug bounty program is among the largest in DeFi with a maximum payout of 1,000 ETH for properly disclosed critical vulnerabilities. For more information of Balancer's Bug Bounty program, please visit our Immunefi page.
Note
Bounties only apply to protcol smart contracts. Bug reports pertaining to Balancer's web interfaces, both in terms of UI/UX or servers/infrastructure, are not eligible.
For security reports outside of the scope of the bug bounty program, please reach out via security@balancer.finance
Audits
Balancer has completed full audits with Certora, OpenZeppelin, Trail of Bits, and ABKD.
Scope | Company | Report |
---|---|---|
Vault, Weighted Pool, Stable Pool | OpenZeppelin | 2021-03-15 |
Vault, Weighted Pool, Stable Pool | Trail of Bits | 2021-04-02 |
Vault | Certora | 2021-04-22 |
MultiRewards, Stable Pool | OpenZeppelin | 2021-10-09 |
Linear Pool, Stable Phantom Pool | Trail of Bits | 2021-10-08 |
Timelock Authorizer | ABDK | 2022-05-27 |
Batch Relayer | Trail of Bits | 2022-05-27 |
Composable Stable Pool | Certora | 2022-09-23 |
Composable Stable Pool | Trail of Bits | 2022-09-02 |
Managed Pool | Trail Of Bits | 2022-10-25 |
Audit reports can also be found in the Balancer V2 Core repository.
Code Immutability
The core contracts that make up the Balancer V2 Protocol, such as the Vault and Pools (Weighted, Stable, LBP, Managed, Linear, etc), are immutable by design. Any pool updates are made by deploying brand new factories/pools and require users to electively migrate.
Balancer x Certora Accelerator
On the 10th of October 2022, Balancer launched the Balancer Certora Security Accelerator in partnership with Certora. The Security Accelerator helps projects building on Balancer increase their code security.
The Accelerator provides code reviews and grants access to Certora’s formal verification Prover. This alignment strengthens the soundness of the code base and streamlines the go-to-market process for projects building on Balancer.
The Balancer x Certora Security Accelerator offers the following benefits:
- Two weeks of manual code review by Certora engineers familiar with Balancer’s codebase
- Set up and introduction of Certora’s formal verification Prover
- $10.000 USD worth of credits for Certora’s formal verification Prover
- Integration assistance by Balancer on code functionality and business logic