Catenaa, Sunday, December 01, 2024-Uniswap Labs has unveiled the largest-ever bug bounty program in decentralized finance (DeFi), offering up to $15.5 million for identifying vulnerabilities in its v4 core contracts.
The initiative, announced on November 26, aims to ensure the security of Uniswap’s newest version, which introduces innovative features like customizable pool interactions and cost-saving mechanisms for liquidity providers and traders.
The bounty focuses on core contract vulnerabilities and is open to developers who can provide clear, reproducible details of any critical bugs they find.
Reports must demonstrate how a vulnerability could affect the platform’s operations, and successful findings may reward researchers with significant payouts.
However, third-party contracts and periphery contracts related to Uniswap v4 are excluded from the program, with future expansions planned.
Uniswap v4, which has already undergone nine independent security audits and a $2.35 million security competition, aims to minimize risks before going live.
Rewards will be distributed in Circle’s USDC stablecoin, with a clear emphasis on maintaining confidentiality during the reporting process.
The announcement comes on the heels of another major update: Uniswap’s introduction of permissionless cross-chain bridging, which allows users to transfer assets across nine blockchain networks directly from its interface, simplifying the asset transfer process and addressing previous delays associated with third-party services.