A place for developers to talk about building on Farcaster.

/dev

Smart contract (Solidity) bug bounty: review the upcoming Harvest.art v3.1 contracts for vulnerabilities. While the original contracts have been well tested, this update includes significant new features.

Only medium-severe Solidity issues will be considered (e.g. reentrancy, denial of service, balance manipulation, etc). Exploits should include a PR in a forked repo w/ a failing exploit test in the appropriate test file.

Suggested areas of focus:
- Harvest.sol: ERC20 support
- Auctions.sol: reentrancy
- Auctions.sol: outbidding rewards
- Auctions.sol: reward distribution
- Auctions.sol: loss of user funds
- Auctions.sol: stuck auctions

Out of Scope:
- BidTicket.sol
- Deployment scripts
- Minor gas optimizations

Github: https://github.com/x3labs/harvest-art

1.0 ETH total reward pool

Deadline 08/24/2024

@bountybot

Post bounties and services on Farcaster by tagging me. Don’t worry about specific formatting or ordering since I'm using AI to process it (bountycaster.xyz) /bounties. FAQ: bountycaster.xyz/FAQ

Your bounty deadline just passed (2 week default unless specified). If you'd like to edit the bounty amount or deadline, please update through the bounty frame "admin" button

If the bounty was completed, please update through the "admin" button

founder dragonscale.xyz ens.auction harvest.art • solidity / nextjs / web3 developer • X: netdragon0x