<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectButton />

<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Name

Please input a title

Short description of the vulnerability and the affected asset.

The core team is situated in country(ies) that received low aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests an increased difficulty and complexity in preventing and mitigating fraud.

The core team is situated in country(ies) that received medium aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests a medium level of geographic accountability, thus reducing and mitigating the risk of fraud.

The core team is situated in country(ies) that received the best aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests the highest level of geographic accountability, thus maximizing the risk reduction and mitigation.

Vulnerability Title

transfer

transferFrom

totalSupply

balanceOf

allowance

approve

USDT

Centralization Risks in BSCOut/TRONOut

Centralization Risks BSCChannel/TRONChannel

Missing Zero Address Validation

Potential Reentrancy Attack

Unchecked ERC-20 `transfer()`/`transferFrom()` Call

Improper Usage of `public` and `external` Type

Variables That Could Be Declared as Immutable

`IERC20` interface name doesn't reflect the functionality

Declaration Naming Convention

Comments Should Be in English

Unused State Variable

Centralization Risks in USDT.sol

`_hashUsed` is not updated in `burnLock()`

`onlyMiner` is supposed to be `onlyMinter`

Incorrect Error Message

ICPLAZA - Ⅱ

BSCChannel.sol

BSCOut.sol

TRONChannel.sol

TRONOut.sol

USDT.sol

Channel.sol

IERC20Ext.sol

TOutAsset.sol

Potential Overpayment

Discussion on `authBiz.Amount` coins

Unhandled Return Value

Code May Be Incomplete

Redundant Code

Finance Model

ICPLAZA

query.go

tx.go

dao.go

grpc_query.go

hooks.go

keeper.go

msg_server.go

params.go

genesis.go

handler.go

module.go

codec.go

errors.go

events.go

expected_keepers.go

keys.go

msgs.go

Top 10% Code Security Score

Formal Verification

ICPLAZA's mission is to build and actively promote the ecological construction of an open Metaverse.

Icplaza

Leaderboards

Due Diligence Tools

Resources

KYC Status