Uniswap Labs: Uniswap V4 Security Contest Is Set to Wrap Up on October 1st

The organization behind the decentralized exchange Uniswap Through a post on the social media platform X, Uniswap Labs has indicated that the Uniswap v4 security challenge will officially end on October 1st. To take part, security researchers are required to submit their vulnerability findings by this deadline.

The Uniswap v4 security challenge boasts an impressive total prize pool of $2,350,000, consisting of a Primary Prize Pool of $2,250,000 and an additional $100,000 allocated for formal verification.

The allocation of the Primary Prize Pool is determined by how serious the vulnerabilities are that are uncovered. For example, if valid findings of low severity are reported, there is a reward of $50,000. Should researchers uncover valid mid-level severity issues, the reward increases to $300,000. In the event of valid high-severity findings, the prize skyrockets to $1,050,000, and if critical-severity vulnerabilities are found, the total prize can reach an astounding $2,250,000. high-severity findings Fifty thousand dollars from the prize pool is specifically allocated for low-severity discoveries. All submissions will undergo a quality assessment, and reviewers will be ranked from 1 to 10 to determine how the rewards are distributed. Uniswap Labs encourages participants to deliver high-quality, substantive reports detailing low-severity vulnerabilities.

Furthermore, there is an additional $100,000 earmarked for the formal verification pool, which encourages the use of the Certora Prover to formally validate certain properties in the Solidity smart contracts being tested. Participants are incentivized to identify and confirm properties with significant coverage.

This includes components such as v4-core (commit: 18b223c), v4-periphery (commit: 151b282), and universal-router (commit: a81e1ce). The involved dispatcher contracts provide functions like V4_POSITION_CALL, V3_POSITION_MANAGER_CALL, V3_POSITION_MANAGER_PERMIT, and V4_SWAP. The participating chains consist of Ethereum mainnet, Arbitrum, Avalanche, Base, and Blast, to name a few.

The scope of the competition Uniswap Clarifies Severity Categories For Vulnerability Findings

In accordance with the established severity categories, a critical severity finding is defined when a high severity issue causes losses of 50% to 100% of the Total Value Locked (TVL) across all participating chains. A high severity finding results in losses between 5% and 50% of the total TVL.

Medium severity includes a denial of service (DoS) attack that halts access to over 5% of the total TVL for a duration exceeding one minute, with costs less than the value of the affected funds. Moreover, any individual losses such as theft, waste, or permanent freezing that impact at least 1% of users who individually lose at least 1% of their invested capital fall into this category.

Low severity is characterized by a DoS attack that limits access to more than 1% of the TVL for more than one minute, again with a cost that does not exceed the value of the involved funds. This also includes instances of individual losses that involve at least 1% of a user’s capital.

Please be advised that the details on this page do not serve as legal, tax, investment, financial, or any other form of advice. It’s crucial only to invest amounts you can afford to lose and consult a financial professional if you have any uncertainties. For more information, please refer to the terms and conditions along with the help and support sections provided by the issuer or advertiser. MetaversePost strives to deliver accurate and impartial reporting, yet market conditions may change without prior notice.