Audits and bug bounty

What has been reviewed so far, and how to report a problem.

​

What it is

The state of Pari’s outside review today, and how to report a problem.

• Audits. No external audit has been done yet. One is planned before mainnet. Until then, treat the programs as new code.
• Bug bounty. There is no bug bounty yet. One is planned before mainnet.

The Meteora code that Pari runs on is outside Pari. DBC 0.2.x, which includes the hook code, has no public audit.

​

When to use it

Come here when you find a problem, or when you want to know what has been reviewed.

​

Step by step

1. Check what you found

   Open Verify. It reads the programs, the admin and the fee splits from the chain. The token page shows the lock read from the chain.

2. Report it

   Write to [e-mail] with what you saw and where.

​

What can go wrong

Pari’s programs are new. Do not treat a passing check on Verify as an audit. See Risks.

​

Next

Verify it yourself

Check the rules against the chain.

Risks

What can go wrong, and what the protocol cannot do.