Cointime

Download App
iOS & Android

Earn Rewards of Up to $20,000 with the dlcBTC/Remedy Bug Bounty Program

At dlcBTC, we take transparency and security seriously. As a decentralized, safer wrapped Bitcoin, dlcBTC opens new avenues for BTC holders to engage in DeFi while leveraging the security of the Bitcoin network. However, the primary risk associated with such an innovation lies in the smart contracts that power it.

Acknowledging this, we've partnered with Remedy to launch a bug bounty program to identify and resolve potential vulnerabilities in our EVM smart contracts. Dive into the dlcBTC smart contracts and put your skills to the test - visit the Remedy platform to submit your findings and earn up to $20,000 in rewards!

We are excited to announce the launch of our bug bounty program, designed to ensure that our smart contracts are robust, secure, and free from any vulnerabilities. This program reflects our proactive security approach and commitment to engaging the broader community in safeguarding our platform.

In collaboration with Remedy, one of the leading Web3 cybersecurity platforms, we invite developers, security researchers, and ethical hackers to participate in this program. By doing so, you contribute to the security of our ecosystem and earn significant rewards.

Participating in the dlcBTC/Remedy bug bounty program is straightforward. Here's a general step-by-step guide to get you started:

Review dlcBTC's documentation to understand the smart contract's purpose, functionality, and intended user interactions. This will give you a solid foundation upon which to build your analysis. Visit our resource page for comprehensive documentation and insights.

Once you thoroughly understand the documentation, it's time to form an attack model. This involves thinking through various scenarios:

  • Happy Scenarios: Consider situations where everything works as expected. This will help you understand the intended functionality and user interactions.
  • Dangerous Scenarios: Think about situations where things could go wrong. Identify potential pitfalls and vulnerabilities in the smart contract's logic that could lead to undesirable outcomes.

Clone the dlcBTC code to your local machine and use your preferred integrated development environment (IDE) with specialized extensions for smart contract auditing. Carefully review the code, looking for any vulnerabilities malicious actors could exploit.

This step requires creativity and strategic thinking. Put yourself in the mindset of an attacker and think outside the box to identify potential vulnerabilities. Consider how you might break the system and anticipate possible attack vectors.

After conducting your analysis and identifying any vulnerabilities, log in or sign up on the Remedy platform to submit your bug report. Ensure your report includes all necessary details, and for high/critical severity bugs, include a runnable Proof of Concept (PoC) to demonstrate the impact.

The rewards for identifying vulnerabilities in our smart contracts are based on the severity of the bug found. Here's how the rewards are structured:

  • Critical Bugs: Discovering a crucial bug can earn you between $10,000 and $20,000.
  • High Severity Bugs: Finding a high-severity bug could result in a reward between $5,000 and $10,000.
  • Medium Bugs: Identifying a medium-severity bug can earn you up to $5,000.
  • Low and Informational Bugs: Low and informational bugs are not eligible for rewards but are still valuable to improving our platform's security.

All payouts are handled directly by the dlcBTC team and are denominated in USD.

We invite all developers, security experts, and ethical hackers to join us in securing dlcBTC. Review our smart contracts and submit your findings on the Remedy platform. Together, we can build a more secure DeFi ecosystem. Don't miss this opportunity to contribute and earn rewards!

Remedy is a Web3 security platform dedicated to supporting white hackers and enhancing the security of the Web3 ecosystem. They address critical cybersecurity challenges and help navigate potential pitfalls for the greater good. Remedy’s mission is to contribute to the evolution of the Web3 landscape by actively sharing knowledge, fostering collaboration, and championing best security practices.  They also offer free access to their revolutionary tool Glider that allows security researchers to scan for vulnerabilities across entire EVM integrated blockchains at breakneck speed. 

Join Remedy’s Discord community to learn more about it.

dlcBTC is on a mission to bring the power of Bitcoin to the DeFi world while upholding Bitcoin's core principles of decentralization and security. By leveraging Discreet Log Contracts (DLCs), dlcBTC creates a trust-minimized bridge between Bitcoin and Ethereum, enabling Bitcoin holders to participate in yield-generation activities without sacrificing control over their assets. This innovation allows Bitcoiners to stake, borrow, lend, and hedge on Ethereum while self-custoding their Bitcoin.

To ensure the security of our platform, dlcBTC has undergone four comprehensive security audits by reputable firms, including MetaTrust and CoinFabrik. These audits have helped us strengthen our codebase, but we recognize that security is ongoing. That's why we have partnered with Remedy/Hexens to launch this bug bounty program as an additional layer of protection.

Review dlcBTC's smart contracts now and visit the Remedy platform to submit your report for a chance to win up to $20,000 in rewards.

Comments

All Comments

Recommended for you

  • Robinhood Chief Legal Officer Dan Gallagher Says He Won't Become SEC Chairman

    According to market news, Dan Gallagher, the Chief Legal Officer of Robinhood, stated that he would not serve as the Chairman of the US Securities and Exchange Commission.

  • Cosine: After a user used GPT to write a bot with a backdoor code, the private key was sent to a phishing website

    SlowMist Yu Xian stated in a post on the X platform that a user used GPT to write a bot with code and sent the private key to a phishing website. The reason why the private key was stolen was because it was directly sent to the phishing website in the HTTP request body. Yu Xian reminded that when using LLM such as GPT/Claude, one must pay attention to the common fraudulent behavior of these LLM. It was previously mentioned that AI poisoning attacks were carried out, and now this is a real attack case targeting the crypto industry.

  • U.S. Supreme Court rejects Facebook's attempt to avoid shareholder securities fraud lawsuit

     US Supreme Court rejected Facebook's attempt to avoid shareholder securities fraud lawsuits under the META umbrella.

  • The final value of the US one-year inflation rate in November is expected to be 2.6%, the expected value is 2.7%, and the previous value is 2.60%

     the expected final value of the US one-year inflation rate in November is 2.6%, with an expected value of 2.7% and a previous value of 2.60%. The expected final value of the US five-to-ten-year inflation rate in November is 3.2%, with an expected value of 3.1% and a previous value of 3.10%.

  • Polymarket Blocks French Users Amid Government Investigation into Gambling Law Compliance

    Polymarket has blocked users from France following reports of an investigation by the country's gaming authority for compliance with gambling laws. The ban was not stated in Polymarket's terms of service, but French users attempting to access the website using a VPN from a French server were met with a digital blockade. The ANJ, France's national gaming authority, began investigating Polymarket after a French trader placed large bets on Donald Trump winning the 2024 US Presidential election.

  • U.S. stocks open, most crypto stocks open lower

     the US stock market opened with the Dow Jones up 0.19%, the S&P 500 up 0.05%, and the Nasdaq up 0.01%. Most cryptocurrency stocks opened lower, with Coinbase (COIN.O) down 0.06%, MicroStrategy (MSTR.O) up 0.4%, and Riot Platforms (RIOT.O) down 2.6%. Previously, Bitcoin had risen above $99,000 before falling back.

  • Amazon to invest an additional $4 billion in Anthropic, OpenAI's rival

     Amazon is deepening its cooperation with Anthropic and will add an additional $4 billion investment to the company. In September of this year, Anthropic, an artificial intelligence startup, was seeking a new round of financing with a valuation of up to $40 billion. Anthropic was founded by former OpenAI executives in 2021 and focuses on creating interpretable, secure, and controllable artificial intelligence systems. The company's flagship AI model, Claude, operates based on "Constitutional AI," which uses predefined principles to guide its output, avoiding some erroneous or discriminatory output reactions.

  • Family Offices Evolve into Powerful Investment Entities with Innovative Strategies and Advanced Technologies

    Family offices, which traditionally focused on conservative investment strategies, have transformed into powerful investment entities with a focus on alternative investments, private equity, co-investments, venture capital, and impact investing. This shift has been driven by innovative financial solutions and modern investment strategies, responding to technological advancements and an evolving global financial landscape. Family offices are taking a more active role in direct investments and co-investments, particularly in high-growth companies and startups, enhancing their control and flexibility. They are also diversifying further into private markets and real assets due to geopolitical and macroeconomic uncertainties, while embracing innovative financing solutions and cutting-edge risk management techniques. Additionally, family offices are implementing AI technologies to improve their decision-making processes, particularly in investment analysis, reflecting their commitment to innovation and strategic planning.

  • The Evolution of Family Offices: Embracing Innovative Investment Strategies and Technology

    Family offices have shifted from conservative investment strategies to more active roles in direct investments and co-investments, thanks to innovative financial solutions and modern investment strategies. They are now leaders in alternative investments, private equity, co-investments, venture capital, and impact investing, leveraging their capital through non-recourse and limited-recourse financing to expand their investments across sectors and regions. Family offices are also adopting sophisticated risk management strategies, diversifying further into private markets and real assets, and integrating advanced technologies such as AI-driven platforms to enhance decision-making processes. A family office in the UAE, International Venture Investments Holding, takes an active investment approach, emphasizing operational autonomy and forming dedicated management teams for specific projects. The UBS Global Family Office Report 2024 shows that 78% of family offices plan to invest in generative artificial intelligence in the next two to three years.

  • XEX officially launched the Slerf/USDT perpetual contract at 19:00 (UTC+8) on November 22

    On November 22nd, XEX officially launched the Slerf/USDT perpetual contract at 19:00 (UTC+8).