Uniswap (UNI) Labs Partners with Cantina to Enhance Bug Bounty Program
By Extreme Investor Network | July 20, 2024
Uniswap (UNI) Labs has taken a significant step towards strengthening its security measures by collaborating with Cantina to expand its bug bounty program. This strategic partnership aims to encourage the discovery and reporting of vulnerabilities within the Uniswap ecosystem, offering rewards of up to $2.25 million for critical findings.
Details of the Bug Bounty Program
Uniswap Labs has designated the Uniswap Labs Cantina Bug Bounty Page as the primary channel for reporting bugs and vulnerabilities in their contracts and interfaces. Rewards for reported vulnerabilities are determined based on their severity and the potential impact on assets, with a maximum payout of $2.25 million.
The bug bounty program encompasses any vulnerabilities discovered in contracts deployed by Uniswap Labs and Uniswap interfaces. However, vulnerabilities in third-party contracts not deployed by Uniswap Labs, issues already identified in audits, and bugs in third-party applications utilizing Uniswap contracts are excluded from the program.
Reporting and Reward Criteria
To qualify for rewards, vulnerabilities must be reported through the Cantina platform and kept confidential until the issue is resolved. Public disclosure or sharing with other entities prior to Cantina’s resolution is strictly prohibited. Reports should be submitted within 24 hours of discovering the vulnerability.
A detailed report outlining the vulnerability, including steps to reproduce and the potential impact of exploitation, increases the likelihood and amount of the reward. Uniswap Labs reserves the right to make reward decisions, including eligibility and payment methods.
Program Exclusions
The bug bounty program excludes:
- Third-party contracts not deployed by Uniswap Labs
- Issues already documented in audits
- Bugs in third-party applications utilizing Uniswap contracts
- Internally known issues
Participants who submit vulnerability reports grant Uniswap Labs the necessary rights to validate, address, and disclose the reported vulnerabilities. Individuals who identify unique, previously unreported vulnerabilities that lead to code changes or configurations adjustments may receive public recognition for their contributions.
For complete eligibility requirements and further information, please visit the Uniswap Labs Cantina Bug Bounty Page. Stay tuned for more updates and insights from Extreme Investor Network!
Image source: Shutterstock