The firm behind the largest decentralized exchange (DEX) by trading volume is launching a $15.5 million bug bounty of historic proportions.
According to a new announcement from Uniswap Labs, the bug bounty aims to identify potential holes in Uniswap V4’s core contracts.
Uniswap V4 is set to be the latest version of the DEX.
According to the announcement, Uniswap V4 introduces “hooks”, which Uniswap defines as “contracts that developers can create to customize how pools, swaps, fees, and LP (liquidity pool) positions interact” that allow new features to be added to the DEX.
In two posts to the social media platform X, Uniswap says it is looking for “critical” bugs for the bounty, though “critical” remains largely undefined.
“Introducing the largest bug bounty in history
We’re rewarding up to $15.5M to anyone that finds a critical vulnerability in v4 core contracts
Find a critical bug, become a millionaire…
This bounty covers critical vulnerabilities in the Uniswap v4 core contracts, available in the Uniswap v4 Github repository”
According to the announcement, four categories of bugs remain outside of the bounty’s scope.
- “Third-party contracts that were not deployed by Uniswap Labs
- Issues already listed in the audits for the contracts in the v4 repository
- Bugs in third-party contracts or applications that use contracts deployed by Uniswap Labs
- Issues flagged in previous internal reviews, competitions, and audits”
The firm notes that 500 researchers have already participated in a $2.35 million security competition and that no critical vulnerabilities were found. The new bug bounty program is an extra step to make sure that Uniswap V4 is as secure as possible
Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox
Follow us on X, Facebook and Telegram
Featured Image: Shutterstock/Suwin
Read the full article here
