Uniswap has 15.5 million before v4 launch
Uniswap Labs has announced the launch of what it believes to be the “biggest giveaway in history” ahead of the release of Uniswap v4.
A grant program currently underway offers $2,000 to $15.5 million in purses for specific vulnerabilities to make changes to the code.
In order to receive the higher payouts, bounty hunters must disclose or exploit a critical flaw in the Uniswap v4 core contracts code, according to the program's terms.
Uniswap Labs announces “biggest bug bounty ever” on X.com. Source: Uniswap Labs
“Introducing the biggest bug bounty in history. We're awarding up to $15.5M to anyone who finds a critical vulnerability in v4 core contracts. Find a critical bug, become a millionaire.”
Bug bonus
It is not clear if this is the largest gift program in history. For comparison, bug bounty platform Immunefi reportedly paid out $14.82 million in bonuses in 2021.
Related: Immunefi Bans TrustSec Over Bug Bounty Controversy
Google's highest exposure payout in 2022 is $605,000, and the company paid a total of $12 million this year. And, recently, Microsoft announced $4 million in cloud and AI grants.
Based on available information, Uniswap's $15.5 million bonus would be the largest in recent memory if it were to be paid out in one lump sum.
However, according to Uniswap Labs, more than 500 researchers participated in the $2.35 million previously released v4 security challenge, and no critical vulnerabilities were found. The company said the $15.5 million program is “an additional step to ensure v4 is as secure as possible.”
The maximum payout of $15.5 million is available only to researchers who find specific vulnerabilities in Uniswap's v4 core contracts code that lead to code changes.
Table showing maximum payout requirements for Uniswap Lab's $15.5 million bounty program. Source: Uniswap Labs/Cantina
Exposures labeled “critical” qualify for higher payouts, while those marked “high” qualify for payouts of up to $1 million, according to the program's specifications. A payout of up to $100,000 is made for “moderate” risk exposures, and payouts are made on an “assumption” basis for low risk exposures.
In addition to the main contract code, the program covers vulnerabilities in “other contracts”, other websites, back ends and Uniswap v4 wallet codes.
Magazine: Make Ethereum Feel Like Ethereum Again: Based Scrolls Explained.
