Uniswap Labs has announced it will pay up to $15.5 million for discovering critical vulnerabilities in the core contracts of the fourth version of the Uniswap non-custodial exchange protocol.
Introducing the largest bug bounty in history ?
We’re rewarding up to $15.5M to anyone that finds a critical vulnerability in v4 core contracts
Find a critical bug, become a millionaire ? pic.twitter.com/2h2bOKRLK6
— Uniswap Labs ? (@Uniswap) November 26, 2024
According to the announcement, the reward is the largest in the history of bounty programs.
The v4 protocol aims to significantly reduce fees for liquidity providers and users, while allowing platform customization through the use of “hooks.” These are contracts that developers can create to configure pool interactions, swaps, fees, and other options.
Earlier this year, the Uniswap team announced the launch of the fourth iteration of the protocol in the third quarter.
Developers claim that Uniswap v4 is among the most thoroughly audited codebases in DeFi. The protocol has undergone nine independent audits by OpenZeppelin, Spearbit, Certora, Trail of Bits, ABDK, and Pashov Audit Group. Additionally, 500 researchers participated in a contest to find critical vulnerabilities with a maximum prize of $2.5 million.
“As deployment approaches, we are taking additional steps to ensure maximum security for v4 with a $15.5 million bug bounty,” Uniswap Labs emphasized.
The program includes searching for bugs in Uniswap’s core contracts. The maximum payout is designated for vulnerabilities with critical risk. Discovering a high-level threat earns $1 million, while a medium-level threat fetches $100,000.
Rewards are also available for bugs in Uniswap’s peripheral contracts outside of v4, with a maximum amount of $2.25 million. Much smaller rewards can be earned for finding errors in the exchange’s web interface, backend, and mobile wallet.
The total declared volume of the exchange’s bounty program reaches $44.4 million.
In October, Uniswap introduced its own Ethereum layer-two network called Unichain.
According to an expert’s estimate, the launch of a native blockchain could potentially bring Uniswap Labs and UNI token holders up to $500 million annually.