THORGames: Synths (Round 1)

#THORGames provide an economically meaningful environment to find holes in the design, implementation, or application on THORChain.

Overall, this is an evolution in ecosystem coordination and improving how major features are brought online with synths being the latest.

The community is invited to participate for the chance to win RUNE and contribute to the security of the ecosystem.

Starting Block: 120,716

Ending Block: 228,716

Background

Synthetic Assets are the next planned major THORChain feature. The main feature PR has been merged for 10 months and has been disabled in chaosnet pending deepened liquidity pools, which are required to guarantee the underlying economic security of synthetic assets.

Objective

Demonstrate a code- or economic-based attack vector on synthetic assets.

The following are in-scope:

1. Synthetic asset mint / redeem bugs allowing more L1 assets to be removed from the system than were put in.
2. Manipulation of liquidity pool depths resulting in synthetic assets being under-collateralized.
3. Economic attacks requiring 1/250th of circulating RUNE or less to carry out.

Exploit Reward Tiers

• P2 (smallest vulns) - small exploit, non system critical, usability, annoying issues 25 RUNE
• P1  (larger vulns) - manipulating pool prices that can extract incremental value over time, still non system crit 500 RUNE
• P0 (critical vulns) - extract more than 10% of total synth value in one transaction or infinite mint/burn, or redeem system critical 10,000 RUNE