<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Short description of the vulnerability and the affected asset.

Vulnerability Title

Third Party Dependencies

Centralization Related Risks

Inconsistent Comment and Code

Missing Zero Address Validation

Unused Return Value

Unchecked Value of ERC-20 `transfer()`/`transferFrom()` Call

Missing Zero Amount Check

Typos

`Lender` Struct With Only One Field

`IVerification` Is Not Implemented

Unregistered User Can Bypass `_isUserRegistered()` If There Is Only One Implementation Of `RewardManager`

Unnecessary Variable `manager`

Conditions Ordering Optimization

Missing Emit Events

User Can Multiply Its Deposit Value on `RewardManager`

`RewardManager` Depends on a Previous Implementation to Deploy

No Unpause Mechanism in `RewardManager`

Unused Role

Wrong Event to Emit

Duplicated Code

Too Many Digits

`SafeERC20` Library Not Used

State Variable Should Be Declared Constant

Initial Token Distribution

Usage of `msg.sender` instead of `_msgSender()`

Polytrade

ILenderPool.sol

LenderPool.sol

IRedeemPool.sol

RedeemPool.sol

IReward.sol

Reward.sol

IRewardManager.sol

RewardManager.sol

IAaveLendingPool.sol

IStrategy.sol

Strategy.sol

IToken.sol

Token.sol

Verification.sol

IVerification.sol

Top 10% Security Score

Mid Market Cap (25%-50% Amongst Projects)

Leaderboards

Due Diligence Tools

Resources