<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Short description of the vulnerability and the affected asset.

Vulnerability Title

Lack of Access Control on the `MarketPlaceHelper` Contract

Attackers May steal Punk by calling `listAsset()`

Possible to Be Unable to Mint Shards After Withdrawing

Centralization Related Risks

Lack of `receive()` Function

Inconsistent Units

ETH from Selling Punk Cannot  be Withdrawable from the `CRYPTO_PUNK_MARKET`

Potential Slots Conflict

Lack of Check When Changing and Initializing Max Supply

Lack of Check on `purchaseAsset()`

Possible Difference Between Unstaked Tokens and `debt`

Return value in function `_collateralizePunk()` May Be Incorrect

Unsafe Integer Cast

Potential Inconsistent `punkIds`

Potential Risk Calling the `_purchasePunk()` Function with Wrongly set `isFinalPurchase`

There is no function to handle the fee 

The Logic of `_withdrawPunkProceeds()`

Lack of Check When Changing Reserved Shards

Unlocked Compiler Version

Unused Variable

Lack of Storage Gap in Upgradeable Contract

Missing Implementation on Closing a PUSD Punk Position

Redundant Modifier "payable"

Missing Emit Events

Incorrect Variable Used in `_remainingShardReservations()`

Insrt Finance

Core.sol

ICore.sol

IShardVaultManager.sol

ShardVaultManager.sol

ShardVaultManagerStorage.sol

IMarketPlaceHelper.sol

MarketPlaceHelper.sol

ICurveMetaPool.sol

ILPFarming.sol

INFTEscrow.sol

INFTVault.sol

INoContract.sol

IVault.sol

ICryptoPunkMarket.sol

IShardCollection.sol

IShardCollectionInternal.sol

IShardVault.sol

IShardVaultAdmin.sol

IShardVaultIO.sol

IShardVaultInternal.sol

IShardVaultView.sol

ShardCollection.sol

ShardCollectionInternal.sol

ShardCollectionProxy.sol

ShardCollectionStorage.sol

ShardVaultAdmin.sol

ShardVaultDiamond.sol

ShardVaultIO.sol

ShardVaultInternal.sol

ShardVaultProxy.sol

ShardVaultStorage.sol

ShardVaultView.sol

Insrt finance is an EVM-compatible protocol for accessing NFTfi returns - with just one click. insrt finance provides a simplification, aggregation and abstraction layer for NFTfi.

Insrt Finance 

Leaderboards

Due Diligence Tools

Resources