<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Short description of the vulnerability and the affected asset.

Vulnerability Title

Chain

Uniswap

`_addReserves`  function is not disabled in OErc721.sol

Centralization Related Risks

`OTokenEx` contract is not ERC721 compliant

Initial Token Distribution

Potential NFT price manipulation

Array Index Not Check

Improper implementation of `balanceOfUnderlying()` and `getAccountSnapshot()`

Potential Reentrancy Attack

Lack Of Access Control

Unimplemented function `_setMigration()`

Include unlisted tokens

Improper interface used

Missing Zero Address Validation

Unchecked ERC-20 `transfer()`/`transferFrom()` Call

Third Party Dependency

Out of Scope Dependencies

Return a different XCN token address

`totalReserves` Update error

Logical issue of function `exchangeRateStoredInternal()` 

Voting Power Not Moved

Transfer votes from `from` instead of `msg.sender`

Discussion: the function `liquidateCalculateSeizeTokens()`

Missing Error Messages

Inconsistent with the logic of the `distributeSupplierXcn()`

Redundant Code

Onyx Protocol - Audit

AggregatorV2V3Interface.sol

ChainlinkOracle.sol

OnyxLens.sol

BaseJumpRateModelV2.sol

CarefulMath.sol

Comptroller.sol

ComptrollerExInterface.sol

ComptrollerG1.sol

ComptrollerG2.sol

ComptrollerG3.sol

ComptrollerG4.sol

ComptrollerG5.sol

ComptrollerInterface.sol

ComptrollerStorage.sol

DAIInterestRateModelV3.sol

EIP20Interface.sol

EIP20NonStandardInterface.sol

EIP721Interface.sol

ErrorReporter.sol

Exponential.sol

ExponentialNoError.sol

InterestRateModel.sol

JumpRateModel.sol

JumpRateModelV2.sol

LegacyInterestRateModel.sol

LegacyJumpRateModelV2.sol

Maximillion.sol

ODaiDelegate.sol

OErc20.sol

OErc20Delegate.sol

OErc20Delegator.sol

OErc20Immutable.sol

OErc721.sol

OErc721Delegate.sol

OErc721Delegator.sol

OEther.sol

OToken.sol

OTokenEx.sol

OTokenInterfaces.sol

PriceOracle.sol

Reservoir.sol

SafeMath.sol

SimplePriceOracle.sol

Unitroller.sol

WhitePaperInterestRateModel.sol

XCN.sol

XCNInterface.sol

Not all parent contract initializing functions are called

Centralized Control of Contract Upgrade

Centralization Risks

Missing Emit Events

Lack of input Validation

Threshold Not Included

Incompatibility With Deflationary Tokens

Unused Contract

Redundant Function Call

Customized Proxy Implementation

ChainCloud - Audit

IERC20.sol

IPool.sol

OptimizedTransparentUpgradeableProxy.sol

Proxy.sol

UpgradeableProxy.sol

NodeStaking.sol

NodeStakingFactory.sol

Payment.sol

USDTToken.sol

XCNToken.sol

Delegation Not Moved Along With `mint()`

Strict Conditional 

Unlocked Compiler Version

Fork Leftovers

Chain XCN Token

XCN-Token.sol

`grantDAO()` Function Allows Owner to Send RewardToken to Any Address

Missing Moving Delegates in Function `emergencyWithdraw()`

Proposal Failure

Potential Loss of Pool Rewards

Missing Input Validation

Missing Explicit Pool Validity Checks

Function `add()` NOT Restricted

Missing Return Value Checks for `safeTransfer()` and `safeTransferFrom()`

Potential Wrong Return Values of Function `getMultiplier()`

Missing Inheritance

Incorrect Error Message

Chain Staking 

CHNReward.sol

CHNStaking.sol

CHNStaking_V2.sol

Too Many Digits

Divide Before Multiply

Chain Team Treasury Timelock

TeamTreasure.sol

Initial token distribution

Centralization Risk

Chain Token

ChainToken.sol

CertiK Skynet

Top 10% Security Score

Chain acts as a cloud-based blockchain infrastructure solution that allows organizations to launch and operate a blockchain network using Chain Core, and securely manage their financial assets in a token format on private ledgers using Sequence.

Onyx Protocol 

Chain ChainToken

Chain TeamTreasure

Leaderboards

Due Diligence Tools

Resources