<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Short description of the vulnerability and the affected asset.

Vulnerability Title

Missing Account Address Validation on the Staking Vault

Program Upgrade Centralization Risk

Broken `close_staker` instruction

Usage of `f64` is not supported correctly on-chain

Unsafe Mathematical Operations

Locked rewards after staking expiration

Outdated packages

Wrong variable naming

Potential Inconsistency in Vault' Stakers Count

Missing Expiration Validation on `claim_reward`

Missing Rent Refund for Stakers

Missing Input Validation on Staking Initialization

Inefficient Account Space Allocation

Reduce Using `unwrap()` in Production Codebase

Unused Parameters

Unused Dependency and Logic

Leftover Comment

Inconsistent comments

Generic Error Handling 

Unused Variable Naming on Used Parameters

Unnecessary `let` Binding

Unnecessary Comparison on Boolean Value

Manual Implementation Of Assignment Operation

Simplifiable Error Handling 

Typos

Unused `SHILL_MINT_ADDRESS` constant

Missing Event Emission 

PS.io 2

lib.rs

Cargo.toml

Xargo.toml

Critical State Variable Not Updated

Centralization Related Risks

Initial Token Distribution

Potential Reentrancy Attack (Sending Ether or Tokens) 

Third Party Dependency

Lack of Zero Address Validation 

Missing Input Validation

Unchecked ERC-20 `transfer()`/`transferFrom()` Call 

Function `loadReward()` has no access control

`if` condition will never be met

Improper Usage of `public` and `external` Type

Variables That Could Be Declared as Immutable

Incompatibility with Deflationary Tokens

PS.io

ShillLock.sol

NFTEngine.sol

Shill.sol

CappableStaking.sol

IStaking.sol

Staking.sol

AccessProtected.sol

Centralized Token Holding Position

Centralization Risk

Project Seed pt 3

CertiK Skynet

Top 10% Security Score

Project SEED is a GameFi Metaverse Ecosystem built by an AAA Game Studio that aims to build a mobile-focused blockchain gaming ecosystem that utilizes Multi-Chain Hybrid Technology and integrates Game Hub, GameFi, DAO, Esports, and Growth Program. 

Project SEED 

 Shill

Mid Market Cap (25%-50% Amongst Projects)

Leaderboards

Due Diligence Tools

Resources