BountyVision

By @NascentSecurity

[BountyVision @BountyVision]

There's a new top bounty in town!

🫡 @Uniswap

[Cantina 🪐 @cantinasecurity]

The biggest bug bounty in history is now live. @Uniswap just raised the standard of building in public 🪐

With $15.5M on the line, it's an unprecedented testament to the rigorous security of v4. Think you can find a critical bug? Give it a shot.

🔗 Bounty link below

[BountyVision @BountyVision]

**Swell** expands with 28 new bounty targets! **Inverse Finance** adds 1, while **thUSD** adds 2. Dive into the details at https://t.co/aCzZSSWKNz! 🌊🔍👾 #bugbounty #cybersecurity #Swell #InverseFinance #thUSD

[BountyVision @BountyVision]

Bounty update! 🎯 dlcBTC appeared then vanished on Rxyz. Inverse Finance adds 4 new targets on Immunefi. SafeTech Labs posts new bounties on Hackenproof. MAIA joins Immunefi! Details at https://t.co/aCzZSSWKNz 🌐 #bugbounty #cybersecurity

[BountyVision @BountyVision]

🌟 Tokemak launches a new bounty on Rxyz 💡 ZetaChain adds 2 new targets on Hackenproof: https://t.co/NgEctBSXC1 and https://t.co/xmd4bDyMr9. Check all updates at https://t.co/aCzZSSWKNz! 🔍✨ #BountyBuzz #Tokemak #ZetaChain

[BountyVision @BountyVision]

Eclipse and Firedancer have launched new bounties on Immunefi! Meanwhile, Metis has removed its bounty from Rxyz. Check out all updates on https://t.co/aCzZSSWKNz! 🚀📊 #BugBounties #Eclipse #Firedancer #Metis

[BountyVision @BountyVision]

Babylon Labs shifts its start date, zkSync Era adds 19 new targets, Ethereum Foundation launches a new bounty, Aevo flexes with 2 more addresses, C3 removes its bounty, and TruFin boosts payouts with 7 new targets. Check updates on https://t.co/aCzZSSWKNz 🔍💥

[BountyVision @BountyVision]

Superfluid exits Hackenproof, while StakeStone, Babylon Labs, and Light Protocol launch new Immunefi bounties! 🚀 Check all updates at 👇https://t.co/aCzZSSWKNz

[BountyVision @BountyVision]

🚨 "Recent Updates" is live! 🚨

We aggregate bounties across every platform and showcase those with the latest changes 🎯

Spot fresh code in bounties—prime targets for new bugs 🐛🔍

Stay up to date on Twitter and in our new Telegram channel 📢

https://t.co/rnRf1T0sNo

[BountyVision @BountyVision]

Just pushed some performance fixes - site should feel much much snappier!

[BountyVision @BountyVision]

See for yourself at: https://t.co/aCzZSSXiD7

[BountyVision @BountyVision]

Just rolled out a new scrolling ticker for recently updated bounties!

More on the way on this front - we're cooking up something nice ;o)

[BountyVision @BountyVision]

and of course the top bounty should be displayed in the search! live now

[BountyVision @BountyVision]

We (finally) have a real search!

And yes it captures "/" and "cmd+k"

bounty dot vision

[BountyVision @BountyVision]

Also included some performance updates and improved mobile support. Please let us know here or via the feedback form if you encounter any issues (especially on mobile!)

[BountyVision @BountyVision]

We warn you about these :o)

[kaden.eth @0xKaden]

bug bounty programs be like:

5 MILLION DOLLAR MAX BOUNTY
*only up to 10% of funds at risk

funds at risk: $670.82

[BountyVision @BountyVision]

Upgrading to another JSON API for a major platform now.

We are grateful - scraping bounty pages is a pain, and only one of the sites we support had a public API before we started this site.

Not saying the wave is ENTIRELY because of us, but... 😏😉

[BountyVision @BountyVision]

This was a major pain point for us as bounty hunters as well - we put together some internal tooling to address it.

Would a basic bulk download of the source for all in-scope contracts be sufficiently useful here?

Simplest version (ready ~now) would just be a .zip organized like:

<contractname>_<address>_<chain>/<*.sol>

Better version would include smart path resolution + file deduplication, etc. for IDE go-to-definition. We have a hacky version of this internally right now, but getting it ready for public use will take a bit.

Best version would just be a compilable foundry project (the dream)

[StErMi @StErMi]

One of the big pains with @immunefi is that you have to open each smart contract in scope.

They should require the project to create an ad hoc and always in sync GitHub repo that mimics the deployed source code; otherwise, it's pretty challenging to manage it.

[BountyVision @BountyVision]

Integrated https://t.co/fZW198psGz by @hexens

More bounties for you, bug bounty hunters!

[BountyVision @BountyVision]

many such cases

[Joey Krug @joeykrug]

Signal has:

- No bug bounty as far as I can tell
- No proper public disclosure after critical vulnerabilities are fixed
- Uses weirdly insecure email that governments can likely read for their vuln inbox
- On (at a minimum their desktop app), messages weren’t deleted for years

[BountyVision @BountyVision]

Morpho's massive new max bounty of $2.5M makes them leapfrog 3 other protocols in the lending space.

Here's the new lending leaderboard 🏆💵👀

1. @fraxfinance ($10M)
2. @sparkdotfi ($5M)
3. @MorphoLabs ($2.5M) ⬆️⬆️⬆️
4. (tied) @aave ($1M) ⬇️
4. (tied) @solendprotocol ($1M) ⬇️
4. (tied) @SovrynBTC ($1M) ⬇️

Find where you stack up at https://t.co/nSOrh319SM