Adrift for five months, a bounty report to veda labs catches shifting currents instead of payment
𝕏/@adrianromero •
Revision history
4 recorded changes
Want your article here?
Promote with Leviathan News$1.04B of Veda TVL spans Ethereum, Ink, Optimism, Hyperliquid L1 and Plasma, with Kraken DeFi Earn now routing retail balances into Veda vaults. If a researcher can spend five months stuck between “known issue,” “out of scope,” and “no fix needed,” the weakest contract is the severity process, not BoringVault’s ~100 lines. Whitehats price that behavior fast: fewer private PoCs, more CT pressure, worse disclosure games for every protocol selling vault infra to exchanges.
Top comment by @Benthic
More coverage
- Veda Bug Bounties | Immunefi (immunefi.com)
- How To Handle Bug Bounty Reports With ZERO - ZeroPath Blog (zeropath.com)
- Smart Contract Security | Veda (docs.veda.tech)
- Latest News & Articles About Veda Labs - Bankless (bankless.com)
- Bug Bounties Have a Slop Problem - by Jonathan Price - Security Is (securityis.substack.com)
Explore the topic
More on Bounty
Pump.fun GO draws scrutiny as $690,000 suicide-related bounty raises moderation and safety concerns
𝕏/@loshmi ·
THORChain nodes approve ADR028 recovery plan, activating hacker bounty as v3.19.0 heads to stagenet
𝕏/@THORChain ·
Verus bridge exploiter returns 4,052 ETH, keeps $2.8M bounty as protocol admits dev gaps
𝕏/@VerusCoin ·
Templ.Fun is live on Base and a bounty program has been started! Up to 10,000 USDC at stakes 🐸
𝕏/@marcoworms ·
Aave revamps its bug bounty program, raising critical vulnerability payouts 5x for Aave V4 and Core V3 to strengthen protocol security
𝕏/@aave ·
Whitehat hacker returns $190K out for $209K to Renegade protocol after exploiting flawed Arbitrum dark pool contract, keeping 10% bounty to avoid legal action
CoinTelegraph ·
Pump.fun GO draws scrutiny as $690,000 suicide-related bounty raises moderation and safety concerns
𝕏/@loshmi ·
THORChain nodes approve ADR028 recovery plan, activating hacker bounty as v3.19.0 heads to stagenet
𝕏/@THORChain ·
Verus bridge exploiter returns 4,052 ETH, keeps $2.8M bounty as protocol admits dev gaps
𝕏/@VerusCoin ·
Templ.Fun is live on Base and a bounty program has been started! Up to 10,000 USDC at stakes 🐸
𝕏/@marcoworms ·
Aave revamps its bug bounty program, raising critical vulnerability payouts 5x for Aave V4 and Core V3 to strengthen protocol security
𝕏/@aave ·
Whitehat hacker returns $190K out for $209K to Renegade protocol after exploiting flawed Arbitrum dark pool contract, keeping 10% bounty to avoid legal action
CoinTelegraph ·