A place for developers to talk about building on Farcaster.

/dev

Smart contract (Solidity) bug bounty: review the upcoming Harvest.art v3.1 contracts for vulnerabilities. While the original contracts have been well tested, this update includes significant new features.

Only medium-severe Solidity issues will be considered (e.g. reentrancy, denial of service, balance manipulation, etc). Exploits should include a PR in a forked repo w/ a failing exploit test in the appropriate test file.

Suggested areas of focus:
- Harvest.sol: ERC20 support
- Auctions.sol: reentrancy
- Auctions.sol: outbidding rewards
- Auctions.sol: reward distribution
- Auctions.sol: loss of user funds
- Auctions.sol: stuck auctions

Out of Scope:
- BidTicket.sol
- Deployment scripts
- Minor gas optimizations

Github: https://github.com/x3labs/harvest-art

1.0 ETH total reward pool

Deadline 08/24/2024

@bountybot

Post bounties and services on Farcaster by tagging me. Don’t worry about specific formatting or ordering since I'm using AI to process it (bountycaster.xyz) /bounties. FAQ: bountycaster.xyz/FAQ

founder dragonscale.xyz ens.auction harvest.art • solidity / nextjs / web3 developer • X: netdragon0x

Reentrancy Attack https://github.com/x3labs/harvest-art/pull/5