<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectButton />

<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Name

Please input a title

Short description of the vulnerability and the affected asset.

The core team is situated in country(ies) that received low aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests an increased difficulty and complexity in preventing and mitigating fraud.

The core team is situated in country(ies) that received medium aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests a medium level of geographic accountability, thus reducing and mitigating the risk of fraud.

The core team is situated in country(ies) that received the best aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests the highest level of geographic accountability, thus maximizing the risk reduction and mitigation.

Vulnerability Title

Apex

Anyone Can Drain Native Token And Mint Wrapped Token From the Bridge

Centralization Risks in avaxBridgeContract.sol and hbarBridgeContract.sol

No Cap on Fees

No Check on `_targetChain`

Missing Zero Address Validation

Unnecessary Use of SafeMath

Centralization Risks in WrappedToken.sol

ApexBridge - Audit 

WrappedToken.sol

avaxBridgeContract.sol

hbarBridgeContract.sol

Centralization Risks

Centralization Related Risks  In `addLiquidityETH()`

Initial Token Distribution

No Upper Limits for Fees

The Unit of Receipt Token

Reward token balance not verified

Third Party Dependencies

Potential Sandwich Attack

Unchecked ERC-20 `transfer()`/`transferFrom()` Call

Unused Return Value

Wrong Event Parameter

Enable `swapLiquify` to Add Liquidity

Missing Emit Events

Missing Error Messages

Variables That Could Be Declared as `constant`

Improper Usage of `public` and `external` Type

Functions With `_` as Name Prefix Are Not `private` or `internal`

Variables That Could Be Declared as Immutable

Redundant Code Components

Missing Inheritance

Too Many Digits

Unused State Variable

Incorrect Error Message

Redundant `require` Check

Not Check Blacklist in Function `claimNodes`

The Purpose of Insurance

APEX

apex.sol

CertiK Skynet

Top 10% Code Security Score

A Web 3.0 Infrastructure and development company that builds and operates decentralized assets.

Apex Foundation

Leaderboards

Due Diligence Tools

Resources

KYC Status