
Monolith Stablecoin Factory bug bounty on Sherlock: up to 20,000 DOLA
Monolith pays up to 20,000 DOLA for critical bugs in its stablecoin factory and CoinDAO contracts on Ethereum. The Sherlock bounty went live on October 23, 2026.
The Monolith Stablecoin Factory bug bounty went live on Sherlock on October 23, 2026. Monolith is a permissionless platform for deploying immutable, over collateralized stablecoins backed by any ERC20 token with a Chainlink price feed.
Critical bugs pay 5,000 to 20,000 USD, high 3,000 USD, medium 1,000 USD and low 250 to 500 USD. Rewards are paid in DOLA on Ethereum and are counted in USD.
The scope covers both live stablecoin factories and the new CoinDAO factory and implementation contracts on Ethereum mainnet. CoinDAO sets up a governance stack for each stablecoin, with a token, staking, a governor, a timelock and revenue routing.
Reports go through the Sherlock bounty page. The first valid report of an issue is the one that counts. Issues already acknowledged in earlier audits, including a Sherlock public contest in December 2025, are not eligible.