<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Short description of the vulnerability and the affected asset.

Vulnerability Title

Centralization Related Risks

No Access Restriction On Function `removeFeeder()`

Not Withdraw Rewards While Transferring Asset

Withdraw Balance Is Not Properly Calculated

Unused Return Value

Third Party Dependencies

Safe Transfer Not Invoke `_checkOnERC721Received()`

No access restriction on function `initialize()`

Not Distinguish Between ERC20 or ERC721 Token

No Price Validation Between UniswapV3 And ChainLink

`auctionStrategyAddress` is not explicitly checked in `validateEndAuction()`

Unchecked Value of ERC-20 `transfer()`/`transferFrom()` Call

Redundant Modifier `onlyWhenAssetExisted` On Function `removeAsset()`

Redundant Codes

Potential Price Manipulation

ParaSpace (Audit 3)

AirdropFlashClaimReceiver.sol

UserFlashclaimRegistry.sol

LooksRareAdapter.sol

SeaportAdapter.sol

X2Y2Adapter.sol

ERC721OracleWrapper.sol

NFTFloorOracle.sol

ProtocolDataProvider.sol

UniswapV3OracleWrapper.sol

ParaSpaceOracle.sol

ACLManager.sol

PoolAddressesProvider.sol

PoolAddressesProviderRegistry.sol

ReserveConfiguration.sol

UserConfiguration.sol

AuctionLogic.sol

BorrowLogic.sol

ConfiguratorLogic.sol

FlashClaimLogic.sol

GenericLogic.sol

LiquidationLogic.sol

MarketplaceLogic.sol

PoolLogic.sol

ReserveLogic.sol

SupplyLogic.sol

ValidationLogic.sol

DefaultReserveAuctionStrategy.sol

DefaultReserveInterestRateStrategy.sol

PoolApeStaking.sol

PoolConfigurator.sol

PoolCore.sol

PoolMarketplace.sol

PoolParameters.sol

PoolStorage.sol

MintableIncentivizedERC721.sol

NToken.sol

NTokenApeStaking.sol

NTokenBAYC.sol

NTokenMAYC.sol

NTokenMoonBirds.sol

NTokenUniswapV3.sol

ApeStakingLogic.sol

MintableERC721Logic.sol

WETHGateway.sol

WPunkGateway.sol

balanceOf

allowance

approve

transferFrom

transfer

totalSupply

MintableERC20

MockAToken

stETH

MintableDelegationERC20

ERC20

`NToken.permit()` doesn't check the token owner

Potential Flashloan Attack

Potential Reentrancy Attack

Potential Financial Loss

Incompatibility with Deflationary Tokens

Functions Not Restricted

Check-Effects-Interact Pattern Not Implemented

Potential Incorrect Price Risk

Unchecked ERC-20 `transfer()`/`transferFrom()` Call

Incorrect Conditional Statement

Lack of reasonable boundary

Lack of Account Validation

`initialize()` Is Unprotected

Redundant `else` Clause

Missing Zero Address Validation

Redundant Code

Unused State Variable

Potential risks of pool establishment

Discussion On Borrow With Credit

Incorrect Comments

ParaSpace - NFT Money Market

PriceOracleSentinel.sol

Errors.sol

MathUtils.sol

PercentageMath.sol

WadRayMath.sol

ConfiguratorInputTypes.sol

DataTypes.sol

Pool.sol

ScaledBalanceTokenBaseERC721.sol

Formal Verification

CertiK Skynet

ParaSpace is a decentralized lending protocol that allows users to borrow and lend against Non-Fungible and Fungible tokens alike. ParaSpace allows users to tap into otherwise-unused capital to fund further investments and earn yields on the same.

ParaSpace 

ParaProxy

Leaderboards

Due Diligence Tools

Resources