solidity

Smart contract (Solidity) bug bounty: review the upcoming Harvest.art v3.1 contracts for vulnerabilities. While the original contracts have been well tested, this update includes significant new features.

Only medium-severe Solidity issues will be considered (e.g. reentrancy, denial of service, balance manipulation, etc). Exploits should include a PR in a forked repo w/ a failing exploit test in the appropriate test file.

Suggested areas of focus:
- Harvest.sol: ERC20 support
- Auctions.sol: reentrancy
- Auctions.sol: outbidding rewards
- Auctions.sol: reward distribution
- Auctions.sol: loss of user funds
- Auctions.sol: stuck auctions

Out of Scope:
- BidTicket.sol
- Deployment scripts
- Minor gas optimizations

Github: https://github.com/x3labs/harvest-art

1.0 ETH total reward pool

Deadline 08/24/2024

@bountybot