<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectButton />

<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Name

Please input a title

Short description of the vulnerability and the affected asset.

The core team is situated in country(ies) that received low aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests an increased difficulty and complexity in preventing and mitigating fraud.

The core team is situated in country(ies) that received medium aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests a medium level of geographic accountability, thus reducing and mitigating the risk of fraud.

The core team is situated in country(ies) that received the best aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests the highest level of geographic accountability, thus maximizing the risk reduction and mitigation.

Vulnerability Title

Misleading result of multiplier calculation

`rewardParams` usage

Divide Before Multiply

Centralization Risks in DhedgeStakingV2Storage.sol

Unrestricted Function

Potential Token Price Manipulation

Ineffective `require()` due to mathematical calculations

Dangerous Strict Equality

Unnecessary inheritance

Potential Reentrancy Attack (Out-of-Order Events)

Improper Usage of `public` and `external` Type

Comparison to A Boolean Constant

Redundant Check under certain assumptions

Missing Emit Events

Missing bounds

Typo

Centralized Control of Contract Upgrade

dHEDGE - Ⅳ

Base64.sol

DhedgeStakingV2.sol

DhedgeStakingV2RewardsCalculator.sol

DhedgeStakingV2Storage.sol

DhedgeStakingV2VDHTCalculator.sol

IDhedgeStakingV2.sol

Centralization Risk

Meaningless State Variables

Missing Input Validation

Potential Call Data Attack

Discussion For Function `withdraw`

dHEDGE V2 III

BalancerV2Guard.sol

PoolFactory.sol

OpenAssetGuard.sol

UniV2LPAggregator.sol

QuickLPAssetGuard.sol

AddressHelper.sol

OneInchV3Guard.sol

PoolLogic.sol

AaveLendingPoolAssetGuard.sol

SushiLPAssetGuard.sol

UniswapV2RouterGuard.sol

SlippageChecker.sol

PoolManagerLogic.sol

QuickStakingRewardsGuard.sol

Lack Of Input Validation

Proper Usage of `public` And `external` Type

Useless `modifier`

Unnecessary Comparison

Inaccurate Comparison

Uninitialized Dynamic Array

Incorrect Coordinates

Lack Of `isSupportedAsset` Validation

dHEDGE V2

Top 10% Security Score

Top 10% Code Security Score

Top 10% Market Score

Top 10% Operation Score

Social Asset Management
Find the best investment managers and automated strategies in DeFi.

dHEDGE DAO

Leaderboards

Due Diligence Tools

Resources

KYC Status