Somnia Audit Contest : Program info

Total Prize Pool: $300k USDC

• 10k is a pot which will be distributed if at least 1 Low severity issue discovered
• 40k is a pot which will be distributed if at least 1 Medium severity issue discovered
• 100k is a pot which will be distributed if at least 1 High severity issue discovered
• Additional 150k will be unlocked for critical severity issues discovered: For the purpose of this contest, a critical vulnerability is defined as an issue that enables the theft of substantial user funds or protocol assets.
• Note: 10% from each unlocked severity pot will be retained by the platform as a service fee.

Please note:

Minor or theoretical loss vectors — such as small rounding errors — do not qualify as critical, even if they technically result in direct fund movement. This definition is consistent with HackenProof’s Blockchain protocol Vulnerability Classification, and final decisions on severity will be made in collaboration with the project team.

Consensys specification issues

All critical issues related to consensys specification, will be capped by $80k in HAI tokens as a part of DualDefense program

We encourage researchers to submit all impactful findings, but only those meeting the strict “substantial fund theft” threshold will trigger the bonus payout.

Reward Splitting for Duplicate Findings If the same issue is reported by multiple researchers, the reward will be split using the following formula:

Final Reward = Severity Weight × (0.9 ^ (N - 1)) / N

Where:

• Severity Weight =

  • Low → 20
  • Medium → 30
  • High → 50

• N = number of researchers who submitted the same valid issue

• Rewards are normalized against the total contest allocation and severity budget

Example (for a High severity issue with a weight of 50):

• 1 researcher reports → receives 50 points
• 2 researchers report → each receives ≈ 22.5 points
• 3 researchers report → each receives ≈ 15 points

This system encourages early discovery and rewards uniqueness while ensuring all valid reporters are fairly acknowledged.

Core Dev Installations

The following are installations required to start building and developing on Somnia.

1. Install Bazelisk. We highly recommend using Bazelisk over standard Bazel to ensure that your system is always on the correct version of Bazel and Clang.

./tools/install_bazelisk.sh

2. Install additional Bazel buildtools. This is required to run our linter script, among other things.

./tools/install_buildtools.sh

Ensure that "$HOME/.local/bin" is on your path. This should be default on most Linux distributions, but if not you can add the following > line at the end of your ~/.bashrc file:

export PATH="${HOME}/.local/bin:${PATH}"

3. Install remaining code dependencies.

sudo ./tools/install_dependencies.sh

4. Run a local mainnet

NETWORK_PRESET=mainnet-small ./ci/run-local-deployment.sh

If you are running on MacOS:

# Install Docker Desktop for Mac
   brew install --cask docker

   # Clone the repository
   git clone <repository-url>
   cd somnia

   # Build and run using Docker with x86_64 emulation
   docker build -f .github/Dockerfile --platform linux/amd64 -t somnia .
   docker run -it --platform linux/amd64 somnia
	 
	 # Inside of container
	 NETWORK_PRESET=mainnet-small ./ci/run-local-deployment.sh