Revert v4lend competition on Cantina

The Revert v4lend competition on Cantina pays researchers for bugs in v4lend, a Uniswap v4 lending and automation codebase from Revert Finance. The competition is live. The total prize pool is $50,000 USDC. Only high and medium severity findings are rewarded. No deposit is required. KYC is required to join.

v4lend includes a lending vault that takes Uniswap v4 LP NFTs as collateral, a two source oracle that uses Chainlink compatible feeds with Uniswap v3 TWAP checks, a Uniswap v4 hook for automation on swaps, standalone automators, vault transformers, and liquidation helpers. The in scope code is the repository revert-finance/v4lend at commit f6d0fb41b7487f60ce64e011312a956e184e2a75. Named files cover the vault, the oracle, the hook, the automators, the transformers, and shared helpers.

A coded proof of concept is mandatory for critical, high, and medium findings, and it must be valid before the competition ends. Tests, scripts, and documentation are out of scope. So are documented design choices the team accepts, trusted role assumptions, MEV, gas griefing, frontrunning, and frontend or off chain components. This is the first external security review of v4lend. No prior audit reports exist yet.

The competition started on 6 October 2026 and ends on 3 November 2026. You need to be logged in as a researcher on Cantina to join. Questions go to the Cantina core team through the Cantina Discord. Build instructions on the page are forge build and forge test in the cloned repository.

Quick answers

How much does it pay?

$50,000 USDC prize pool. It is paid as prizes to the winning entries.

When is the deadline?

The deadline is 3 November 2026.

Who can apply?

Security researchers who join the Cantina competition. KYC is required to join. High and medium findings need a coded proof of concept before the competition ends. Applicants from anywhere in the world can enter, unless the eligibility rules say otherwise.

Is it online or in person?

Online. You can take part from anywhere the rules allow.

How do I apply?

Through the official page at cantina.xyz. The link is at the top of this page.

Is a deposit required to join?

No. The competition page says no deposit is required.

Which findings are paid?

Only high and medium severity findings are rewarded. Critical, high, and medium findings need a valid coded proof of concept.

Has this code been reviewed before?

No. The page says this is the first external security review and that no prior audit reports exist yet.