Uniswap Launches Bug Bounty Program for Ethical Hackers
Uniswap ($UNI) Labs has recently introduced its Bug Bounty Program, inviting ethical hackers and security researchers to identify and report vulnerabilities in Uniswap’s deployed contracts. The goal is to enhance the platform’s security and protect user funds. Depending on the severity of the bug, rewards can reach up to 2,250,000 USDC.
Scope of the Program
- Target vulnerabilities in specific Uniswap deployed contracts, such as Universal Router, Permit2, V3, and UniswapX.
- Bugs found in other Uniswap smart contracts that pose a risk to user funds will also be considered in-scope.
Exclusions
- Third-party contracts not under Uniswap’s control are not covered.
- Issues already listed in audits for the mentioned contracts are excluded.
- Bugs in third-party contracts or applications that use Uniswap contracts are not part of the program.
- The Uniswap DAPP, web interface, and non-contract related materials are not eligible for bug reporting.
Reward Structure
Bug severity is categorized into four levels:
- Critical Issues: Impacting numerous users and posing serious reputational, legal, or financial risks.
- High Issues: Affecting individual users and posing moderate financial risk.
- Medium Issues: Posing relatively small risks and not threatening user funds.
- Low/Informational Issues: Relevant to security best practices but not posing an immediate risk.
Rewards are determined based on severity and the likelihood of exploitation, solely at the discretion of Uniswap Labs.
Disclosure Protocol and Eligibility
All vulnerabilities must be reported to Uniswap Labs via the designated email. Public disclosure is prohibited until Uniswap Labs resolves the issue and grants permission. To be eligible for a reward, the reporter must be the first to disclose a unique vulnerability within the program’s scope and provide sufficient information for reproduction and fixing.
Hot Take
Uniswap’s Bug Bounty Program demonstrates its commitment to security and invites the crypto community to actively contribute to its improvement. By incentivizing ethical hackers, Uniswap aims to identify and address vulnerabilities promptly, ensuring the platform’s integrity and user protection.
By
By
By
By