<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectButton />

<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Name

Please input a title

Short description of the vulnerability and the affected asset.

The core team is situated in country(ies) that received low aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests an increased difficulty and complexity in preventing and mitigating fraud.

The core team is situated in country(ies) that received medium aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests a medium level of geographic accountability, thus reducing and mitigating the risk of fraud.

The core team is situated in country(ies) that received the best aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests the highest level of geographic accountability, thus maximizing the risk reduction and mitigation.

Vulnerability Title

No Gas Restriction on Transaction Could Possibly Lead to DoS Attack As The Mempool Will Be Exhausted 

Potential Design Flaw in Voter Set Election Algorithm 

A New Node Is Unable to Join The LBM Network with State Sync 

Missing Duplication Check on RPC Servers as State Providers for `startStateSync()` 

Runtime Crash If The Address Is Not Registered in Book

Unhandled Error When Calling `rand.Read()`

Incomplete Input Validation of Function `ValidateBasic()` 

Inaccurate `totalCount` of Voters

Lack of Evidence Validation in Function `ValidateBlock()` for Block Validation

Potential Logical Flaw in Indexing Transactions

Missing Validation of `ValidatorSet` in Function `ValidateBasic()`

Potential Panic in Fast Sync Mode Due to Missing `ValidateBlock()` Before `SaveBlock()`

Unable to Restart a Node After Calling `Rollback()`

Function `RandomSamplingWithPriority()` Will Return A Proposer When `actualTotalPriority` Is Not The Same As `TotalPriority` 

Lack of Pruning `VoterParams` and `LastProofHash` in Function `PruneStates()`

Function `AddChannel()` Does Not Return Error When Failing

Lack of Support for DNS Timeout

Port Mapping Operations Do Not Check Response of SOAP API 

Avoid Using Default Go HTTP Client Implementation

Lack of Input Validation in Commit Verification

Lack of Input Validation of Proof in Function `ProofToHash()`

Inaccurate `MaxHeaderBytes`

Redundant Sorting of Candidates

Optimization of Function `signChallenge()` 

Redundant Validation of `VotersHash` in Function `VerifyAdjacent()`

Usage of Deprecated `ioutil`

Mismatches between `VrfProofSize` and `VrfOutputSize` 

Typo in An Error Message of Function `ValidateBasic()`

Discussion on The Usage of `config.KeepInvalidTxsInCache` 

Inconsistent Usage of Pointer Receiver

Discussion on The Usage of Composite Key Type

Unused Function `StateProvider()` in Node

Lack of `Round`, `Proof` and `ValidatorsHash` in Function `Header()`

Inconsistency between Ostracon and LBM on Function `showValidator()`

Missing Return Error in  Function `SignerClient.Ping()`

Production Code in Test File

Inaccurate Initialization of Voters Power and Voter Size 

Discussion on the Usage of Validator Proposer Priority

Missing Field `VotingWeight` in Function `Validator.String()`

Missing Field `Type` in The Calculation of `MaxVoteBytes()`

LINE - Audit (Ostracon)

client.go

grpc_client.go

grpc_client_test.go

local_client.go

local_client_test.go

socket_client.go

socket_client_test.go

abci-cli.go

main.go

code.go

counter.go

make_val_set_change_tx.go

make_val_set_change_tx.sh

README.md

helpers.go

helpers_test.go

kvstore.go

kvstore_test.go

persistent_kvstore.go

example.go

example_test.go

grpc_server.go

server.go

socket_server.go

parallel.go

simple.go

blank.go

app.go

test.sh

ex1.abci

ex1.abci.out

ex2.abci

ex2.abci.out

client_server_test.go

tests.go

application.go

messages.go

messages_test.go

pubkey.go

result.go

types.pb.go

util.go

version.go

pool.go

pool_test.go

reactor.go

reactor_test.go

peer.go

peer_test.go

reactor_fsm.go

reactor_fsm_test.go

io.go

metrics.go

processor.go

processor_context.go

processor_test.go

routine.go

routine_test.go

scheduler.go

scheduler_test.go

types.go

msgs.go

msgs_test.go

unmarshal.go

unmarshal_test.go

debug.go

dump.go

kill.go

gen_node_key.go

gen_validator.go

init.go

light.go

probe_upnp.go

replay.go

reset.go

reset_test.go

rollback.go

rollback_test.go

root.go

root_test.go

run_node.go

show_node_id.go

show_validator.go

show_validator_test.go

testnet.go

LINE - Audit

abci.go

abci_test.go

accountwgs.go

accountwgs_test.go

baseapp.go

baseapp_test.go

block_gas_test.go

grpcrouter.go

grpcrouter_helpers.go

grpcrouter_test.go

grpcserver.go

msg_service_router.go

msg_service_router_test.go

options.go

options_test.go

params.go

params_test.go

queryrouter.go

queryrouter_test.go

recovery.go

recovery_test.go

router.go

router_test.go

state.go

test_helpers.go

cmd.go

config.go

config_test.go

toml.go

statik.go

favicon-16x16.png

favicon-32x32.png

index.html

oauth2-redirect.html

swagger-ui-bundle.js

swagger-ui-bundle.js.map

swagger-ui-es-bundle-core.js

swagger-ui-es-bundle-core.js.map

swagger-ui-es-bundle.js

swagger-ui-es-bundle.js.map

swagger-ui-standalone-preset.js

swagger-ui-standalone-preset.js.map

swagger-ui.css

swagger-ui.css.map

swagger-ui.js

swagger-ui.js.map

swagger.yaml

config.json

swagger_legacy.yaml

flags.go

flags_test.go

reflection.go

reflection.pb.go

reflection.pb.gw.go

block.go

block_test.go

query.pb.go

query.pb.gw.go

service.go

service_test.go

status.go

input.go

input_test.go

Launched by LINE, the global messenger company, the LINK project aims to deliver a blockchain platform and token economy for mainstream consumers.

LINE Blockchain

Leaderboards

Due Diligence Tools

Resources

KYC Status