Up to 2500k $BURGER SecurityBug Bounties

BurgerCities
BurgerCities
3 min readAug 24, 2021

--

Dear Burger fans, we are glad to share with you what we have been working on. Because of the previous hacker incident, our burger team has always attached great importance to product technical security issues. With the improvement of the community’s voice, we have issued a long-term security bug bounties, up to 250k burger.We also included new features Switch Protocol in this bounty.
(The Switch Protocol, a True Cross-Chain Assets Swap Protocol developed by the BurgerSwap team, is now open for beta trial testing!)

Switch Protocol Overview

Switch Protocol is a true cross-chain asset swap protocol developed by BurgerSwap, built to solve the issues hindering the true circulation of assets among public chains.

Switch allows true and LossLess asset movement and liquidity redistribution cross-chain with ZERO slippage, supporting major stable coins, including USDT, USDC, and DAI, between the Ethereum, BSC, Heco, Polygon and Arbitrum chains in the current beta version. Users can provide the liquidity of these supported assets to earn transaction fees. For true movement we mean that resulting swapped coins are the original token instead of wrapped tokens.

In the future, the Switch Protocol will continue to expand support to include other mainstream asset types such as BTC and ETH while expanding to other new public chains and Layer 2, such as Solana, Polkadot, Avalanche, Terra, and Optimistic Rollup, ZK Rollup, and other networks.

Up to 250k $BURGER Rewards for Mr. Whites

To better protect the security of our users’ assets, the Beta version is open now, and we are rolling out a “Bug Bounty Program.” General users are welcome to test it and share their feedbacks to share the 50k $BURGER reward portion of the reward pool. Experienced users and ethical hackers are welcomed to submit bug reports to share the reward pool's 200k $BURGER reward portion.

More information about the smart contracts can be found at github.com/burgerswap-org.

[Event Period]

Aug 24, 2021 — Mar 24, 2022, 23:59 UTC+8

[Event details]

The Beta User Testing Event

BurgerSwap team will choose 500 users to share up to 50k BURGER (each 2). To participate, complete at least one transaction on Switch, and fill in 1–3 feedbacks about beta version in the form below.

Form address: forms.gle/sPs8r1r8Xva5d8JR8

The Beta Bug Bounty Event

  1. Submit a clear report about bugs/issues you have found and/or working exploits to burgerkingswap@gmail.com.
  2. All bug reports must come with proof of concept (POC) and a suggestion of a fix in order to be considered for a reward.
  3. BurgerSwap team will classify the bugs submitted on a simplified 4-level scale: High, Medium, Low, None, to share the rewards. The rewards for each level are as follows:
  • Critical: Up to 100k $BURGER
  • High: Up to 50k $BURGER
  • Medium: Up to 10k $BURGER
  • Low: Up to 5k $BURGER
  • None: 0 $BURGER

Prioritized vulnerabilities:

We are especially interested in receiving and rewarding vulnerabilities of the following types:

  • Smart Contact/Blockchain
  • R-entrance
  • Logic errors, including user authentication errors
  • Solidity/EVM details not considered (Including integer over-/under-flow; Including unhandled exceptions)
  • Trust/dependency vulnerabilities (Including composability vulnerabilities)
  • Oracle failure/manipulation
  • Economic/financial attacks, including flash loan attacks
  • Congestion and scalability (Including running out of gas; Including block stuffing; Including susceptibility to frontrunning)
  • Consensus failures
  • Cryptography problems
  • Signature malleability
  • Susceptibility to replay attacks
  • Weak randomness
  • Weak encryption
  • Susceptibility to block timestamp manipulation
  • Missing access controls/unprotected internal or debugging interfaces

Websites and API:

The only web vulnerabilities in the rewarding scope are those which could lead directly and unequivocally to loss of user funds, a direct breach of data, and the deletion of site data.

Classify bugs on a simplified 5-level scale:

  • Critical
  • High
  • Medium
  • Low
  • None

All bug reports must come with a PoC and a suggestion for a fix in order to be considered for a reward.

About BurgerSwap

BurgerSwap is the first DEX on BSC, which is created by and for the community. As the people’s exchange, it emphasizes democracy and decentralization, and community governance. BurgerSwap is always actively growing with its community. Recently, it has added the Switch Protocol, a true cross-chain asset swap feature, with more upgrades and collaborations to come.

More Info on BurgerSwap:

[Website] [Twitter] [Telegram]

--

--

BurgerCities
BurgerCities

The first standardized blockchain-enabled game of metaverse scenario on BSC