<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Short description of the vulnerability and the affected asset.

Vulnerability Title

transfer

transferFrom

totalSupply

balanceOf

allowance

approve

GalactixToken

Check on `balanceOf(_buyer)` allows signatures to be reused

Users Can Bypass Transfer Fee

Malleability of `abi.encodePacked`

User May Pay More than `priceInBNB`

Taxes on `transferFrom()` and `safeTransferFrom()`

Initial Token Distribution

Shadowing Local Variable

`Ownable` Inheritance is Not Used

Centralization Related Risks

Centralized Control of Contract Upgrade

Third Party Dependency

Missing Zero Address Validation

Unsafe Integer Cast

Missing initialization of `ReentrancyGuardUpgradeable`

Missing Input Validation

Usage of `transfer()`/`send()`  for sending Ether

Unchecked Value of ERC-20 `transfer()`/`transferFrom()` Call

Potential for Replay Attacks

Using Hardcoded Testnet Address in Contract

Aggregator used is not for correct pair

Some Users May Be Prevented from Purchasing Tokens

User can buy in the wrong `_salePhase`

Value is never Negative

string `mergeSet` is not unique for `_tokenIds`

Inconsistency in `_timestamp` Check

Improper Values Recorded

Event Not Accurate when `_salePhase` is 4

Input `_isUsingBNB` allows for Locked BNB

Redundant Checks

Use of `VerifyWhitelist()` in `buyTokenWithExactlyBUSD()` and `buyTokenWithExactlyBNB()`

Leaderboards

Due Diligence Tools

Resources