- Uniswap launches a bug bounty program offering up to 15.5 million USDC for identifying vulnerabilities in its V4 protocol contracts.
- The bounty applies specifically to core contracts available in the Uniswap V4 GitHub repository.
- Exclusions from the program include third-party contracts not deployed by Uniswap Labs and issues already listed in audits.
- Reports must be submitted confidentially within 24 hours of discovery for reward eligibility.
- Uniswap V4 has undergone extensive audits, ensuring high security for its codebase.
Uniswap Unveils Lucrative Bug Bounty Program
Uniswap has announced the launch of a highly rewarding bug bounty program, offering up to 15.5 million USDC for discovering vulnerabilities within the contracts of its fourth protocol version, Uniswap V4. This initiative underscores Uniswap’s commitment to enhancing the security and reliability of its decentralized cryptocurrency exchange platform.
Details of the Bug Bounty Program
The bounty program specifically targets vulnerabilities in core contracts of Uniswap V4, which are accessible through the Uniswap V4 GitHub repository. While the reward is enticing, not all issues qualify for the program. Excluded are vulnerabilities in third-party contracts not deployed by Uniswap Labs, issues already documented in audits, and errors in peripheral contracts.
Submission and Confidentiality Requirements
To be eligible for the reward, reports must be submitted on the Bug Bounty Page on Cantina within 24 hours of discovery. Furthermore, the report must remain confidential until the vulnerability is resolved, ensuring the information is not exploited before a fix is implemented.
Security Assurance and Audits
Uniswap V4 has already undergone nine independent audits, marking it as one of the most scrutinized codebases in the decentralized finance sector. These audits, conducted by renowned firms such as OpenZeppelin, Spearbit, Certora, Trail of Bits, ABDK, and Pashov Audit Group, reinforce the protocol’s security standards.
The announcement of this bug bounty program not only highlights Uniswap’s proactive approach to security but also sets a benchmark for other platforms in the crypto ecosystem. By offering substantial rewards for vulnerability discoveries, Uniswap incentivizes community involvement in maintaining a secure and robust trading environment. As the crypto landscape continues to evolve, such initiatives play a crucial role in safeguarding user assets and fostering trust in decentralized systems.
