Found a bug? Tell us first.

1. How to report

Email [email protected] with what you found, the steps to reproduce it and a proof of concept. Name the contract, transaction or page involved and tell us how to reach you.

• Do not test on mainnet with other users' funds. Use your own wallets, a local fork or testnet.
• Do not share details publicly until a fix is live.

2. Response time

We acknowledge every report within 4 business hours. Then we send you our assessment, keep you updated while we work on a fix, and tell you when it ships.

3. Scope

• The Perpsplexity smart contracts on Sui mainnet listed below, including every upgrade of the upgradeable package.
• The perpsplexity.app website.
• The keepers and backend services that run the pools and the site.

Pools (upgradeable package, original id)

0x97fea95545c04dc73f8174c6195013b100a26e3fa978e7cf8b100a51dfaf8354

Pools (immutable package)

0xaedb8c9a905a778e831aeb4928f660210a7a645925348a7c4ec1cb4a6a3fd16e

Pool engine

0x2ec50cc9740fa5cf75dd7d57e0cb3e1394f3b5cb153806b2168e8e3be681e8c1

Custody adapter

0xbf32cfba21310ac40b05d7269f789270c04aae036ab863dc340c3df3d023fd37

Lending adapter

0x67e9a229946236383e6a84a01f185be9b244e4056ff398d7a39d60a19bd2d8dd

Leveraged tokens

0x294e0968e465d9e2e560b825c603a40d34a7ee72e5a9157ff796519d44f7df4a

Bugs in Sui itself or in third party protocols such as Aftermath and Suilend belong with those teams, but tell us too if they put Perpsplexity users at risk.

4. Safe harbor

Good faith research that follows this page is welcome. We will not take legal action against you for it.

5. Disclosure

If an incident affects user funds, we disclose it publicly within 72 hours and publish a postmortem within 14 days. With your permission, we credit you.

6. Rewards

A bug bounty is coming. Its rewards and rules will be posted here when it opens.

7. Thanks

People who reported issues responsibly:

No names yet.