This competition invites developers and security experts to audit and find vulnerabilities in critical updates to the OP Stack. Your findings will help ensure the robustness and security of Superchain Interop, benefiting the entire Ethereum ecosystem.

Total Prize Pool: $225,000 USDC

• Additional dedicated reward: $25,000 for Cantina Fellowship Stewards.

Prize Distribution

Rewards depend on the severity of identified vulnerabilities:

• High Severity Findings:
  At least one valid high-severity finding unlocks a total prize pool of $225,000.
• Medium Severity Findings:
  If no high-severity vulnerabilities are found but at least one valid medium-severity issue is identified, the total prize pool is $100,000.
• Low/Informational Severity Findings:
  If no high or medium-severity findings occur, a total of $20,000 will be allocated to the top submissions, ranked by quality:
  • 1st: $4,000
  • 2nd: $2,000
  • 3rd: $1,500
  • 4th: $1,500
  • 5th: $1,000

Competition Scope

Your audit should focus specifically on updates in these key areas:

AnchorStateRegistry

• Now acts as the authoritative source validating dispute states between interconnected chains.

ETHLockbox

• A secure contract handling ETH storage, compatible with multiple OptimismPortals and supporting migrations between them.

OptimismPortal Proving Function

• Updated proving functions using Super Roots, activated during chain migrations.‍
• Encoding functions related to Super Roots are also included in this audit.

Out of Scope

• SuperFaultDisputeGame and SuperPermissionedDisputeGame updates are not included.

Support & Contact

Reach the Cantina core team via Cantina Discord for questions or support.