{"id":60168,"date":"2023-09-26T11:01:19","date_gmt":"2023-09-26T15:01:19","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=60168"},"modified":"2023-09-26T11:01:23","modified_gmt":"2023-09-26T15:01:23","slug":"immunefi-launches-vaults-for-on-chain-bug-bounties","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/immunefi-launches-vaults-for-on-chain-bug-bounties\/","title":{"rendered":"Immunefi Launches &#8216;Vaults&#8217; for On-chain Bug Bounties"},"content":{"rendered":"\n<p>Immunefi's new system, &#8220;Vaults,&#8221; enables <a href=\"https:\/\/coinscreed.com\/staging\/where-to-find-web3-developers-for-your-crypto-project.html\" target=\"_blank\" rel=\"noreferrer noopener\">Web3 developers<\/a> to escrow funds in an on-chain address and use them to pay bug bounties to white hat hackers.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img fetchpriority=\"high\" decoding=\"async\" width=\"995\" height=\"589\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/image-76.png\" alt=\"\" class=\"wp-image-60198\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/image-76.png 995w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/image-76-300x178.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/image-76-768x455.png 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/image-76-18x12.png 18w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/image-76-750x444.png 750w\" sizes=\"(max-width: 995px) 100vw, 995px\" \/><figcaption class=\"wp-element-caption\">Immunefi Launches &#8216;Vaults' for On-chain Bug Bounties<\/figcaption><\/figure>\n\n\n\n<p>Immunefi believes that the new system will enable projects to &#8220;demonstrate to whitehats [\u2026] that they have allocated sufficient funds to pay bounties,&#8221; thereby encouraging &#8220;more top-tier bug reports&#8221; to be submitted.<\/p>\n\n\n\n<figure class=\"wp-block-image size-jnews-featured-750\"><img decoding=\"async\" width=\"750\" height=\"372\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/image-75-750x372.png\" alt=\"\" class=\"wp-image-60186\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/image-75-750x372.png 750w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/image-75-300x149.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/image-75-768x381.png 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/image-75-18x9.png 18w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/image-75-360x180.png 360w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/image-75.png 1008w\" sizes=\"(max-width: 750px) 100vw, 750px\" \/><figcaption class=\"wp-element-caption\"><em>List of Immunefi bug bounties. Source: Immunefi<\/em><\/figcaption><\/figure>\n\n\n\n<p>Software developers frequently offer rewards, known as &#8220;<a href=\"https:\/\/coinscreed.com\/staging\/ethereum-network-quadruples-bug-bounty-up-to-1m-as-the-merge-approaches.html\" target=\"_blank\" rel=\"noreferrer noopener\">bug bounties<\/a>,&#8221; to hackers who discover exploits and other software flaws. This enables the identification of vulnerabilities before their exploitation by evil actors. <\/p>\n\n\n\n<p>&#8220;White hat&#8221; hackers submit defect reports for rewards rather than exploiting vulnerabilities, whereas &#8220;black hat&#8221; hackers use their knowledge for malicious purposes.<\/p>\n\n\n\n<p>According to the announcement, the new Immunefi mechanism permits projects to deposit bug bounty funds into a Safe multisig smart contract (previously known as a &#8220;Gnosis Safe&#8221;). <\/p>\n\n\n\n<p>This provides <a href=\"https:\/\/coinscreed.com\/staging\/ftx-hacker-ranks-35th-in-largest-eth-holding-accounts.html\" target=\"_blank\" rel=\"noreferrer noopener\">on-chain evidence<\/a> to whiteheads that the funds are available. Once a project has confirmed that a reported defect is genuine, it can release funds to the bug reporter's wallet.<\/p>\n\n\n\n<p>During the inauguration of Vault, Ethereum infrastructure provider SSV deposited $1 million to help pay bug bounties for its software. Ref Finance, a decentralized exchange on the Near network, also employs the new system. <\/p>\n\n\n\n<p>Eridian, a contributor to the SSV DAO, asserted that on-chain bug bounties will enhance the security of the DAO's validator services, stating:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><em>\u201cThe Vaults System will help us provide added reassurance for any researcher engaging with our bounty program, and in turn help secure the protocol even further. A good win-win. Building further trust with the community by showcasing dedicated funding, and streamlining the payment process, will ultimately strengthen our security efforts.\u201d<\/em><\/p>\n<\/blockquote>\n\n\n\n<p>Immunefi reported in December 2022 that it had paid out $66 million in bug bounties since the platform's inception. On May 17, <a href=\"https:\/\/layerzero.network\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">LayerZero<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a> released a $15 million bug bounty via Immunefi.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Immunefi&#8217;s new system, &#8220;Vaults,&#8221; enables Web3 developers to escrow funds in an on-chain address and use them to pay bug bounties to white hat hackers. Immunefi believes that the new system will enable projects to &#8220;demonstrate to whitehats [\u2026] that they have allocated sufficient funds to pay bounties,&#8221; thereby encouraging &#8220;more top-tier bug reports&#8221; to [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":60198,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[21],"tags":[16548,16547,16549],"class_list":["post-60168","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-bug-bounties","tag-immunefi","tag-vaults"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/09\/image-76.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/60168","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=60168"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/60168\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/60198"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=60168"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=60168"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=60168"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}