Ethereum

Based

Uniswap

Uniswap Labs announced the launch of what it deems “the largest bounty in history” ahead of the Uniswap v4 release.&nbsp;
The bounty program, currently <a data-ct-non-breakable="null" href="https://cantina.xyz/bounties/f9df94db-c7b1-434b-bb06-d1360abdd1be" rel="nofollow noopener" target="_blank" text="null" title="https://cantina.xyz/bounties/f9df94db-c7b1-434b-bb06-d1360abdd1be">underway</a>, features payouts ranging from $2,000 up to the full $15.5 million purse for the discovery of unique vulnerabilities resulting in code change.
In order to achieve the highest payouts, bounty hunters will need to uncover a critical flaw or exploit in the Uniswap v4 core contracts code, per the terms of the program.&nbsp;
<figure>
 <img alt="Security, Cryptocurrency Exchange, Uniswap" src="https://s3.cointelegraph.com/uploads/2024-11/01936953-ff65-71f2-9d84-6723a03df0a7" title="">
 <figcaption style="text-align: center;">
 Uniswap Labs announces “the largest bug bounty ever” on X.com. Source: <a data-ct-non-breakable="null" href="https://x.com/Uniswap/status/1861409607505064238" rel="null" target="null" text="null" title="https://x.com/Uniswap/status/1861409607505064238">Uniswap Labs</a>
 </figcaption>
</figure>
<blockquote>
 “Introducing the largest bug bounty in history. We're rewarding up to $15.5M to anyone that finds a critical vulnerability in v4 core contracts. Find a critical bug, become a millionaire.”
</blockquote>
<h2 id="bug-bounty">Bug bounty</h2>
It’s unclear if this is the biggest bounty program in history. For comparison, bug bounty platform Immunefi <a data-ct-non-breakable="null" href="https://www.theblock.co/post/301025/web3-immunefi-ethical-hacker-payouts" rel="null" target="null" text="null" title="null">reportedly</a> paid out a $14.82 million bounty in 2021 as part of its ongoing security efforts.&nbsp;
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/immunefi-suspends-trustsec-over-bounty-payment-dispute" rel="null" target="null" text="null" title="null">Immunefi suspends TrustSec amid bug bounty dispute&nbsp;</a>
Other notable bounty payouts include Google’s highest-ever vulnerability discovery <a data-ct-non-breakable="null" href="https://www.securityweek.com/google-paid-out-12-million-via-bug-bounty-programs-in-2022/" rel="null" target="null" text="null" title="null">payout</a> of $605,000 in 2022, a year in which the company paid out a reported total of $12 million. And, more recently, Microsoft <a data-ct-non-breakable="null" href="https://www.zdnet.com/article/microsoft-offers-4-million-in-ai-and-cloud-bug-bounties-how-to-qualify/" rel="null" target="null" text="null" title="null">announced</a> $4 million in cloud and AI bounties.&nbsp;
Based on available data, Uniswap’s $15.5 million bounty would become the largest in recent memory if it were claimed in a single payout.&nbsp;
However, according to Uniswap Labs, over 500 researchers participated in its previously held $2.35 million security competition for the unreleased v4, and no critical vulnerabilities were found. The firm <a data-ct-non-breakable="null" href="https://blog.uniswap.org/v4-bug-bounty" rel="null" target="null" text="null" title="null">said</a> the $15.5 million program is “an extra step to ensure v4 is as secure as possible.”
The maximum payout of $15.5 million is only available to researchers who discover unique vulnerabilities in the Uniswap v4 core contracts code that result in code change.&nbsp;
<figure>
 <img alt="Security, Cryptocurrency Exchange, Uniswap" src="https://s3.cointelegraph.com/uploads/2024-11/01936954-9132-7f44-b85b-e47cae99756e" title="">
 <figcaption style="text-align: center;">
 A table demonstrating top payout requirements for Uniswap Lab’s $15.5 millionbounty program. Source: Uniswap Labs/Cantina
 </figcaption>
</figure>
Vulnerabilities deemed “critical” will be eligible for the top payout, according to the program’s details, while those labeled “high” could qualify for a payment of up to $1 million. Payouts dip to $100,000 for “medium” risk vulnerabilities and those for low-risk vulnerability findings will be paid out on a “discretionary” basis.&nbsp;
Beyond the core contracts code, the program also covers vulnerabilities in “other contracts,” other websites, back ends, and Uniswap v4 wallet codes.&nbsp;
Magazine: <a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/based-rollups-make-ethereum-feel-ethereum-again/" rel="null" target="null" text="null" title="null">Make Ethereum feel like Ethereum again: Based rollups explained</a>

Uniswap unveils $15.5M core contracts bug bounty ahead of v4 launch

Table of Contents

Cointelegraph

Other articles published on Nov 26, 2024

UK Financial Regulator FCA Plans to Complete Cryptocurrency Regulations by 2026

Best Crypto Presale to Join in November 2024: Goatseus Maximus and Baby Doge Coin Shine as BTFD C...

To What Level Will the Fall in Bitcoin Continue? At What Level Should You Buy? Standard Chartered...

Ripple and Archax Tokenize Liquidity Fund

Hong Kong’s Largest Digital Bank Opens Doors to Retail Crypto Trading—Bitcoin, Ethereum Now Avail...

Mercado Bitcoin Launches MBRL Stablecoin Pegged to Brazilian Real on the TRON Blockchain

Join our free newsletter for daily crypto updates!