utix-protocol /
UtixSmartContracts #1
utix-protocol /
UtixSmartContracts #1
As a security auditor I log a minor security breach in the Utix Smart Contracts #1
Open
$
0.00
*
0.00
FND
Description
As Utix we want our community to audit the Utix contracts to make sure we get the best audit possible.
Scope of Ticket
-
Only Utix platform contracts:
https://github.com/utix-protocol/UtixSmartContracts/tree/master/contracts/ -
Find a minor security breach
A minor security breach qualifies as an issue in the Utix production code base that is not a major security breach and can cause:
- a loss of data;
- corruption of data;
Reward
Each unique minor security breach is rewarded with $100 in FundRequest tokens (FND)
Precondition
- The auditor must be logged into fundrequest
- The auditor must have experience in Solidity, Code Review & auditing
Flow: Create Pull Request
- Create a new GitHub issue in this repository
- Edit (or add if it does not exist yet)
https://github.com/utix-protocol/UtixSmartContracts/blob/develop/vulnerabilities.md - Add your name as an auditor
- Describe the security breach using the example template
- Create a pull request with a reference to the GitHub issue you created, this will be used by the FundRequest platform. (How to reference an issue in a GitHub Pull request?)
- Utix administrator(s) will review the pull request and validate the reported issue
Postcondition
- The auditor succesfully created a ticket and pull request
- The Utix team has successfully reviewed the pull request and funded the issue with $100 in FND tokens (price of FND)
- The Utix team merges the pull request
- The auditor can claim the funds on the platform (https://fundrequest.io)
Acceptance criteria
- The reported issue is considered a minor security breach as stated in the ticket
- The security breach has to be unique.
- The first person reporting the breach will be awarded the bounty.
- The timestamp of the pull request will be used to define the first person who reported the security breach.
- The bug may only be reported in this the utix-protocol Github repository and cannot be made public on other platforms/media without the consent of the utix team.
- Determinations of eligibility, rewards and all terms related to an award are at the sole and final discretion of the FundRequest team.
- The issue is reported before September 2018
Comments
Comments posted on the request
Funded by
Quinten De Swaef
12,300.00
FND
Quinten De Swaef
Refund
-12,300.00
FND
Subtotal
0.00
FND
Total
0.00
USD
*
This issue has been funded using FundRequest. A developer can claim the reward by submitting a pull request referencing this issue. (How to Close Issues via Pull Requests?) e.g.
fixes #1