<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectButton />

<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Name

Please input a title

Short description of the vulnerability and the affected asset.

The core team is situated in country(ies) that received low aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests an increased difficulty and complexity in preventing and mitigating fraud.

The core team is situated in country(ies) that received medium aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests a medium level of geographic accountability, thus reducing and mitigating the risk of fraud.

The core team is situated in country(ies) that received the best aggregated ratings in terms of international judicial cooperation, criminal justice system, anti-money laundering, and corruption. This contextual data suggests the highest level of geographic accountability, thus maximizing the risk reduction and mitigation.

Vulnerability Title

We were tasked with auditing the PolkaCity contracts. Project allows for decentralized trading of the NFT tokens using POLCToken sold during pre-sale or using Ether.

Unchecked Return Value

Centralization concern

Unlocked CompilerVersion

Redundant VariableInitialization

Unlocked Compiler Version

Redundant Variable Initialization

Checks-effects-pattern not applied

Potential for re-entrancy attack

Redundant Variable in Trade Struct

Lack of input validation for a new trade

Requisite Value of ERC-20 `transferFrom()` / `transfer()`

Return Variable Utilization

Variable tigth-packing

Old version of ERC20 implementation is used

Lack of ERC20 approval race condition protection

Should utilize _burn() from new OpenZeppelin's ERC20 contract

Usage of `transfer()` for sending Ethe

checkTransferLimit() could be bypassed

Redundant SafeMath library

Usage of `transfer()` for sending Ether

Top 10% Security Score

Top 10% Code Security Score

Top 10% Governance Score

Top 10% Operation Score

Top 10% Fundamental Score

Polka City is a unique fully contract-based Polkadot, DeFİ and, NFT combined virtual currency investment platform.

Leaderboards

Due Diligence Tools

Resources

KYC Status