Uniswap Labs has just launched the biggest bug bounty in crypto history, offering up to $15.5 million to anyone who spots critical flaws in its v4 core contracts.
According to details shared on X, The bounty program is divided into different reward levels depending on the severity of the bug. The largest reward, up to $15.5 million, is for finding critical issues. Bugs that pose a high risk can earn up to $1 million, while medium-risk vulnerabilities will be rewarded with $100,000.
To participate, researchers must report any issues within 24 hours and keep the details private until the problem is fixed. Right now, the bounty only covers the core Uniswap v4 contracts, though Uniswap plans to add peripheral and third-party contracts in the future.
This bounty program follows a series of security measures, including nine independent audits and a $2.35 million security competition. Despite these efforts, the company is continuing to invest in protecting the platform, which processes billions of dollars daily. As DeFi-related hacks remain a concern, Uniswap’s proactive approach to security sets a strong example for the industry.
The timing is also critical, according to theblock’s data, attackers have stolen over $3.6 billion from DeFi projects since 2020. In 2022, Uniswap blocked over 250 crypto wallets that were connected to stolen funds or crypto mixer like Tornado Cah which was sanctioned this year by the U.S Treasury.
According to Uniswap, “the program includes vulnerabilities and bugs in any deployed Uniswap contract and the main branch of the specified undeployed v4-core contracts. However if you find a bug in a Uniswap smart contract outside of these repositories, where user funds are at risk, the team will consider the issue to be in-scope for our bounty as an Other Uniswap Contract Code.”
Meanwhile, Immunefi has paid over $100 million to researchers who help find bugs in its system this year.
Also Read: Uniswap Rallies 150% as Analysts Predict $17 to $100 Target