<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectButton />

<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Name

Please input a title

Short description of the vulnerability and the affected asset.

The core team is situated in country(ies) that received low aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests an increased difficulty and complexity in preventing and mitigating fraud.

The core team is situated in country(ies) that received medium aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests a medium level of geographic accountability, thus reducing and mitigating the risk of fraud.

The core team is situated in country(ies) that received the best aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests the highest level of geographic accountability, thus maximizing the risk reduction and mitigation.

Vulnerability Title

Centralization Risks in CaskChainlinkTopupManager.sol

Centralization Risks in CaskChainlinkTopup.sol

Centralization Risks in CaskDCAManager.sol

MaxSkips Strategy is Not Activated When `_checkMinMaxPrice` Failed

Redundant code

Centralization Risks in CaskDCA.sol

Centralization Risks in CaskJobQueue.sol

Centralized Control of Contract Upgrade

Third Party Dependency

Missing `PausableUpgradeable` Usage

Unknown Trusted Forwarder Implementation

Missing sanity checks on Fee setting

Missing Zero Address Validation

Centralization Risks in CaskP2PManager.sol

Centralization Risks in CaskP2P.sol

Divide Before Multiply

Centralization Risks in Subscription Related Contracts

Cask Audit 2

CaskChainlinkTopup.sol

CaskChainlinkTopupManager.sol

CaskDCA.sol

CaskDCAManager.sol

CaskJobQueue.sol

CaskP2P.sol

CaskP2PManager.sol

CaskSubscriptionManager.sol

CaskSubscriptionPlans.sol

CaskSubscriptions.sol

Centralization Risks in CaskSubscriptions.sol

Overpowered permission of a provider

Please Consider If `subscription.renewAt` Is Zero

Centralization Risks in CaskSubscriptionManager.sol

Useless Condition `chargePrice == 0`

Lack of Input Validation

A `subscription` Can Be Burned If `chargePrice < paymentMinValue`

Centralization Risks in CaskSubscriptionPlans.sol

Centralization Risks in CaskTreasury.sol

Centralization Risks in CaskVault.sol

Inconsistent Value of Slippage in Addtion and Subtraction

Risk of  Withdraw Failure for Specified Asset Caused by A Short of Supply

Defined `reserved1` But Not Used

Could Scale to `_toAsset` Precision Directly

Missing Emit Events

How to Guarantee The AggregatorV3Interface Price Pairs Is Correct?

Centralization Risks in CaskVestedEscrow.sol

Missing Input Validation

Unbounded Loop

Cask

Top 10% Code Security Score

Cask is a decentralized non-custodial protocol for automating the flow of money in web3.

Cask 

Leaderboards

Due Diligence Tools

Resources

KYC Status