Shardeum Launches $250K Bug Bounty II on Immunefi

Shardeum is excited to announce the launch of its second bug bounty program in partnership with Immunefi, following the success of our first bounty held from July 8 to August 14, 2024. The enthusiastic response from white hat hackers and community members was truly inspiring, and we extend our heartfelt thanks to everyone who participated. The next round of our bug bounty, with rewards up to $250K, will run from September 4 to October 16, 2024, and we look forward to continuing this journey with your support.

Why is Shardeum Launching Bug Bounty II?

Shardeum is thriving on the momentum of its ongoing Atomium incentivized testnet and successful bug bounty programs over the past two months. With over 5 million transactions recorded on the testnet so far, coupled with valuable bug reports from the community, our engineering team has been working diligently to address identified gaps. The first bug bounty was strategically timed after the completion of Stage 1 of the incentivized testnet, leading to the discovery of few critical protocol vulnerabilities. In Stage 2, we expanded stress testing beyond P2P transactions to include validator functionality. This helped our engineering team to release a new validator update, version 1.12.2, which introduced key improvements and resolved several longstanding and complex node performance issues.

These enhancements have significantly boosted network stability, particularly in the validator functionality, which has been more prone to instability compared to other network features during our betanet testing. While we continue to monitor and optimize the network throughout the ongoing Atomium testnet and bug bounty campaigns, Bug Bounty II presents us with another timely opportunity to further secure the network so we are mainnet-ready.

Details about Bug Bounty II

🔐 Bug Bounty II Program Launch: September 4, 2024 at 12.00 PM UTC

🔐 Program End Date: October 16, 2024 at 12.00 PM UTC

Similar to bug bounty I, bug bounty II offers two tiers of Boosts on Immunefi: Core and Ancillaries. When the Boost has ended, Immunefi will publish an event-specific leaderboard and bug reports from the event. Also, Shardeum team will give a live technical walkthrough, hosted in the Immunefi Discord few days after the launch. In the meantime, you can go through the high level details of scope of codebase and technology published in our bug bounty I blog.

1. Core Boost

This Boost is a successor of Shardeum’s Core Boost and will cover two components: Shardus Core Protocol and Shardeum Validator Nodes. Any technical questions can be asked directly to the our technical team on Immunefi’s Discord in the “shardeum-core-boost” channel.

🔼 Total Reward Pool: $150,000 USDC

🔼 Target Participants: Elite White Hat Hackers

🔼 Technology Focus: TypeScript-based blockchain/DLT codebase

🔼 Codebase Covers: Shardus Core, and Shardeum Validator

🔼 KYC: Not required

2. Ancillaries Boost

This Boost is a successor of Shardeum’s Ancillaries Boost and will only cover the Web2 aspects of the project. Any technical questions can be asked directly to our technical team on Immunefi’s Discord in the “shardeum-ancillaries-boost” channel.

🔼 Total Reward Pool: $100,000 USDC

🔼 Target Participants: Web2 Security Researchers/Experts

🔼 Technology Focus: Rust and TypeScript based Web2 codebase

🔼 KYC: Not required

Join Shardeum Bug Bounty II

Please visit the Shardeum boosts page on Immunefi to participate by clicking the links below. Join us in making the Web3 ecosystem safer and more secure for everyone in return for exciting rewards!

FAQs

1. I participated in Bug Bounty Boosts (I). What is the status of my submissions?

We are currently in the final stages of processing the results and will be making an official announcement soon. Payments for successful submissions will be completed shortly thereafter. We sincerely appreciate your continued support and participation.

2. I have questions about the Bug Bounty Boosts. How can I get help?

You can reach out to our technical team on Immunefi’s Discord server. For queries related to Bug Bounty Boosts, please join the “shardeum-core-boost” or “shardeum-ancillary-boost” channels. Our team will be happy to assist you.