Uniswap

Uniswap

@uniswap
Live

Maximum reward

$15,500,000

Severity

Rewards

CriticalUp to $15,500,000
HighUp to $1,000,000
MediumUp to $100,000

Findings submitted

380

Start date

26 Nov 2024

Please sign in as a researcher to join the bounty.

Log in
InstructionsScope

In scope

Smart ContractsWebsitesOtherUnichain L1 ContractsUnichain Infrastructure
CriticalUp to $50,000
HighUp to $10,000
MediumUp to $2,000
  • Private mempool transaction leaks
  • Rollup Boost
  • Subdomains of unichain.org (i.e. mainnet.unichain.org, excludes docs.unichain.org)

Out of scope

  • V4 Periphery Contracts
  • v4 hooks that were not developed by Uniswap Labs.
  • Clickjacking (we do allow 3rd parties to iframe us)
  • DDOS
  • Bugs in third party code
  • Dev branches that are not deployed in public packages or contracts
  • Third party contracts that are not under the direct control of Uniswap Labs
  • Issues already listed in the audits for the contracts above
  • Bugs in third party contracts or applications that use Uniswap contracts
  • Brute force attacks
  • Rounding errors
  • Cache-control header settings
  • Extreme market turmoil vulnerability
  • Gas optimization recommendations
  • Task Hijacking (Strandhogg)
  • Any vulnerability that is previously known by the Uniswap Labs team
  • Certificate Pinning on Mobile
  • Cache-control header settings

Unichain Out of Scope