Uniswap offers $15.5M bug bounty ahead of v4 launch

Uniswap Labs has launched a $15.5 million bug bounty program ahead of the release of Uniswap (CRYPTO:UNI) v4, calling it “the largest bounty in history.”

The initiative seeks to identify vulnerabilities in the platform’s core contracts and ensure the upcoming version’s security.

The program offers payouts ranging from $2,000 to the full $15.5 million for discovering critical flaws or exploits in the Uniswap v4 core contracts code.

According to Uniswap Labs, researchers who identify unique vulnerabilities that require code changes will qualify for the top-tier payout.

“Find a critical bug, become a millionaire,” the firm stated.

This bounty surpasses previous notable payouts, including a $14.82 million reward issued by Immunefi in 2021 and Google’s record $605,000 single vulnerability payout in 2022.

If claimed in full, Uniswap’s bounty would set a new benchmark for the cryptocurrency industry.

Uniswap Labs emphasised that this program is an extra precaution following its earlier $2.35 million security competition for the unreleased v4, which found no critical vulnerabilities.

The company noted that more than 500 researchers participated in the prior effort, further underscoring its commitment to security.

The current program categorises vulnerabilities into four levels: critical flaws eligible for $15.5 million, high-risk issues qualifying for up to $1 million, medium-risk vulnerabilities capped at $100,000, and low-risk findings rewarded at the discretion of Uniswap Labs.

Beyond core contracts, the bounty extends to Uniswap v4 wallet codes, websites, back-end systems, and other contracts.

At the time of reporting, the Uniswap (UNI) price was $11.49.