<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectButton />

<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Name

Please input a title

Short description of the vulnerability and the affected asset.

The core team is situated in country(ies) that received low aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests an increased difficulty and complexity in preventing and mitigating fraud.

The core team is situated in country(ies) that received medium aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests a medium level of geographic accountability, thus reducing and mitigating the risk of fraud.

The core team is situated in country(ies) that received the best aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests the highest level of geographic accountability, thus maximizing the risk reduction and mitigation.

Vulnerability Title

CyanBlueChipVaultToken

Centralization Related Risks

Missing Zero Address Validation

Unchecked ERC-20 `transfer()`/`transferFrom()` Call

Declaration Naming Convention

Shadowing Local Variable

Check Effect Interaction Pattern Violated

Comparison to Boolean Constant

Usage of `block.timestamp`

`For` loop uses storage variable

No new utility introduced in `activateAdminFundedBnPL()`

Missing Restrictions on fee and fund settings

Unused Return Value

Missing Emit Events (Arithmetic Parameter)

Direct Inheritance of `Initializable` Not Necessary

Missing Emits Events

Missing check for token existence

Cyan - Audit 2

CyanPaymentPlanV1.sol

CyanVaultTokenV1.sol

CyanVaultV1.sol

CyanWrappedNFTV1.sol

IStableSwapSTETH.sol

Variables That Could Be Declared as Immutable

Initial Token Distribution

Ineffective Bound

Missing Emit Events

Unutilized Internal Function

Cyan

contracts

CertiK KYC

CertiK Skynet

Top 10% Watchlisted

Top 10% Code Security Score

Top 10% Fundamental Score

CyanVault

CyanPaymentPlan

CyanVaultToken

CYAN

Leaderboards

Due Diligence Tools

Resources

Bug Bounty Program