Uniswap Labs Blog

$2.35M Prize Pool for v4 Security Competition
August 15, 2024

At Uniswap Labs, we're focused on ensuring v4 is the most audited set of contracts ever deployed onchain. That’s why we're teaming up with the Uniswap Foundation and Cantina to host a security competition for v4 core contracts, periphery contracts, and the Universal Router. With a prize pool of $2.35M, the competition is slated to be the largest in DeFi history.

About the Competition

The competition starts September 4th, 2024 and will run until September 30th, 2024. Anyone can submit vulnerabilities in the v4 codebase. Rewards will be allocated based on the severity of the bug disclosed and quality of the documentation in submissions.

Scope

The competition will focus on reviewing contracts and identifying vulnerabilities in the following GitHub repositories:

Bugs found in other smart contracts that pose a risk to user funds should be submitted to our bug bounty program.

Participate in the Competition

If you are interested in participating, visit the Cantina Competition Page, where the v4 Competition will be posted when it goes live in September. Details on the scope, final commit, and prize pool tiers will be available on the v4 Competition Page.

Additional Information

Competition prize pool is funded by Uniswap Labs, the Uniswap Foundation, and Certora (“Sponsors”). By submitting your report, you grant the Sponsors any and all rights, including intellectual property rights, needed to validate, mitigate, and disclose the vulnerability. All reward decisions, including eligibility for and amounts of the rewards and the manner in which such rewards will be paid, are made at the discretion of Uniswap Labs, the Uniswap Foundation, and Cantina. The full terms and conditions of the competition will be forthcoming and may be altered at any time.