generated: '2026-07-17'
method: searched
probe: true
source: https://aerodrome.finance/security
notes: >-
  Aerodrome publishes a public security page documenting an active bug bounty
  program and multiple smart-contract audits (ChainSecurity, Code4rena,
  Sherlock). The contract security posture is shared with Velodrome. No
  /.well-known/security.txt is served (probe returned 404); the security page is
  the disclosure surface. Immunefi/exact reward tiers were not machine-verified
  (page is Cloudflare-gated) — only what the public security page and search
  confirm is recorded here.
policy:
  - https://aerodrome.finance/security
bug_bounty: true
audits:
  - firm: ChainSecurity
  - firm: Code4rena
  - firm: Sherlock
evidence:
  - source: https://aerodrome.finance/security
    kind: security-page
    keywords: [bug bounty, audit, chainsecurity, code4rena, sherlock]