<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectButton />

<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Name

Please input a title

Short description of the vulnerability and the affected asset.

The core team is situated in country(ies) that received low aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests an increased difficulty and complexity in preventing and mitigating fraud.

The core team is situated in country(ies) that received medium aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests a medium level of geographic accountability, thus reducing and mitigating the risk of fraud.

The core team is situated in country(ies) that received the best aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests the highest level of geographic accountability, thus maximizing the risk reduction and mitigation.

Vulnerability Title

Third Party Dependency

Unprotected Initializer

Incompatibility with Deflationary Tokens

Stake Cannot Be Fully Withdrawn

SafeMath Not Used

Unnessary Variable `owner`

Typo

Unlocked Compiler Version

Design of `unstake()`

Broad Condition

Dora Grant DAO V4

StakingEntry.sol

BuidlDonation.sol

DoraChecker.sol

Module Upgrade Centralization Risk

Centralization Related Risks

Update `min_area` Mistakenly

Wrong Event Parameter

Lack of Restrictions on `votes`

Code Optimization

Import Module from Wrong Package

Unused Variables

Inappropriate `error::already_exists`

A Controversial Restriction

Unused Constants

Test Code Leftover

Aptos Grant DAO-Audit

math.move

qf.move

Missing Emit Events

Logic of Updating `minVotesProject`

Missing Checking Area

Boolean Equality

User-Defined Getters

`initialize()/init()` Is Unprotected

Inconsistent logic for `_unlockTime`

Inconsistent Index of `slopeChanges`

Improper Usage of `public` and `external` Type

Missing Error Messages

Missing Check For `v` and `s`

Unused State Variable

Dora grant v3 

Proxy.sol

grant.sol

admin.sol

storage.sol

user.sol

Migrations.sol

vcDORA.sol

DaoBounty.sol

No Upper Limit for `TAX_POINT`

Missing Input Validation

Dora Grant V2 - Addendum

Proper Usage of `public` And `external` Type

Missing Zero Address Validation

Strengthen Transfer Security

Missing Updating Process With `grant.currentRound`

Wrong Logic In `banProject()`

Priviledged Ownership

Missing Check In Function `grant.changeSetTime()`

Centralization Risk For `grant.dangerSetArea()`

Source Code Of `DORA_ID` Is Not Public

Gas Cost May Exceed Limit Of Function `receive()`

Dora Grant V2

Proper Usage of "require" and "assert" Functions

Proper Usage of "public" and "external" Type 

Unlocked Compiler Version Declaration

Local Variable Shadowing

OSS BUIDL Token

This report has been prepared for Bounding Curves to discover issues and vulnerabilities in the source code of their Dorayaki smart contracts. 

Top 10% Watchlisted

Top 10% Security Score

Top 10% Code Security Score

Top 10% Governance Score

Top 10% Market Score

Top 10% Operation Score

Top 10% Fundamental Score

Dora Factory serves as the digital backbone for the Global Hacker Movement, providing a suite of protocols, tools, and public infrastructure that empower open source communities and pioneers in emerging technologies to flourish.

Dora Factory

Leaderboards

Due Diligence Tools

Resources

KYC Status