ChainCatcher news, Uniswap will offer a bounty of up to $15.5 million to white hat hackers who discover vulnerabilities in its latest protocol, Uniswap v4 core contracts. This is the highest bounty program ever, aimed at ensuring the security of the protocol.Uniswap Labs stated that v4 has undergone nine independent audits and a security competition with a total prize of $2.35 million, with no serious vulnerabilities found so far. However, the team hopes to further secure the protocol through additional rewards, preventing it from being attacked while handling daily transaction volumes in the billions of dollars.The reward amounts are tiered based on the vulnerability risk score, with a maximum reward of $15.5 million for "critical" vulnerabilities, $1 million for "high-risk" vulnerabilities, and $100,000 for "medium-risk" vulnerabilities. Reports must be submitted within 24 hours of discovery and kept confidential until the issue is resolved.

According to ChainCatcher news, the Sui team announced that after the first interruption of the mainnet, they will increase the speed of debugging and generating binary releases, further reducing event response times, while also adding more adversarial transaction types similar to those that triggered this crash to identify potential issues.Previous news, Sui officials stated on the X platform, "Between 1:15 and 3:45 PM Pacific Time on November 21, 2024, the Sui mainnet went down. All validators fell into a crash loop, preventing any transactions from being processed. The Sui network experienced its first network failure due to a bug in the congestion control code. This bug stemmed from a recent upgrade to the congestion control code aimed at better utilizing shared objects. Sui contributors quickly deployed a fix and restored normal network activity within 2.5 hours."

ChainCatcher news, Dogecoin co-founder Shibetoshi Nakamoto stated on X that if one wants to eliminate Dogecoin's inflation, they can directly modify the source code on GitHub and submit a pull request, persuading the community and miners to use the new version. He pointed out that the key code is on line 146 and hopes the community will not disturb him about this matter.Elon Musk subsequently stated: "I believe that the smooth inflation of Dogecoin (i.e., the gradually decreasing inflation rate) is a feature, not a bug."

ChainCatcher news, the Web3 vulnerability bounty platform Immunefi has imposed a 90-day suspension on the white hat security company Trust Security. This decision was made after the latter accused Immunefi of unfairly refusing to pay a bounty for a critical vulnerability that could lead to funds being stolen.On November 12, Trust Security revealed on X that its bounty team had discovered a significant fund theft vulnerability on the forked mainnet of an unnamed project. The proof of concept for the vulnerability has been shared with Immunefi, which acts as an intermediary between white hats and projects to ensure bounties are paid for credible vulnerability identification.However, Immunefi stated that Trust Security detected a vulnerability that was out of scope. Trust claimed that Immunefi erroneously sided with the project’s "nonsense," only offering a "meager goodwill bounty" without providing the full reward for identifying the critical vulnerability.Immunefi rebutted Trust's claims of unfair compensation and issued a 90-day suspension order on the grounds of "misrepresentation of the current issue." Immunefi stated that if Trust commits any further violations, it will impose a permanent ban.

ChainCatcher message, Sui tweeted that it has implemented a bug fix, which is now effective in epoch 564. The staking rewards for epochs 560, 561, 562, and 563 have been distributed, and users can now unstake.

ChainCatcher news, the public chain Sui announced on social platform X that it will implement a bug fix at 10:30 AM Pacific Time on October 27 (epoch 564). A bug occurred during the epoch switch process this Thursday. Sui reminds users to avoid unstaking operations before epoch 564.Sui stated that the overall operation of the network is unaffected, and user staking rewards and fund security are intact, but the rewards for epochs 560-563 will be delayed and distributed uniformly in epoch 564. The staking rewards and principal from previous epochs are not affected.

According to ChainCatcher news, the cryptocurrency trading platform WEEX has announced that its newly upgraded v4.2 version of the WEEX Pro App has recently entered public testing. The new version has undergone over 60 interface optimizations, with trading speed improved by approximately 50%, and space capacity reduced by 80%, fully replacing the original contract trading system with Contract Pro, providing a smoother, safer, and more professional trading experience. During the public testing period, both the new and old versions can be used simultaneously, with the old version scheduled to be officially discontinued by the end of November.To encourage users to test the experience and provide feedback, WEEX has launched a bounty program of 100,000 WXT. Users who test the WEEX Pro App and discover and report bugs before November 30 will receive a reward of 100 WXT for each accepted bug report. The top three users who discover and have the most accepted bugs during the activity period will receive an additional reward of 2,000 WXT.

ChainCatcher news, Galaxy's Vice President of Research Christine Kim summarized the 141st Ethereum Core Developers Execution (ACDE) conference call, with the main points including:The debugging work for Pectra devnet 2 is nearing completion;The release date for Pectra devnet 3 is yet to be determined;The client teams are testing their latest implementations locally;The release date for Peerdas devnet 2 is yet to be determined;There are still some unresolved issues regarding how to design Peerdas proof computation to be more friendly to home stakers and those running validators on low-spec hardware.

ChainCatcher message, Layer3 announced on social media that the Layer3 Foundation has partnered with HackenProof to launch a $500,000 bug bounty program.

ChainCatcher news, Galaxy's Vice President of Research Christine Kim published a summary of the main points from the 139th Ethereum Core Developers Consensus Meeting (ACDC #139). Debugging for Devnet 2 of the Pectra upgrade is ongoing, and the release date for Devnet 3 is yet to be determined; developers will hold weekly testing update meetings starting Monday to better coordinate the release of Pectra's Devnet; the decision to include EIP-7688 in the Pectra upgrade has been postponed again.

ChainCatcher news, according to BleepingComputer, Google has apologized for the loss of a large number of user passwords due to a bug in the Chrome password manager. The issue began on July 24 and lasted for nearly 18 hours, affecting approximately 15 million Windows users using Chrome version M127.Google quickly identified and resolved the issue, and advised users to restart Chrome to restore the password manager functionality. If the problem persists, users should contact Google Workspace support for assistance. This incident serves as a reminder for users to regularly back up their passwords and consider using dedicated password management tools to enhance security. Google has committed to improving software reliability and user support in the future.

ChainCatcher news, according to official sources, Uniswap Labs has announced a partnership with Web3 security company Cantina to expand its bug bounty program. Users can submit applications through the Uniswap Labs Cantina bug bounty page, with rewards distributed based on the severity of the disclosed vulnerabilities and the scale of the assets at risk, up to a maximum of $2.25 million.Additionally, according to official disclosures, the Uniswap protocol has processed over $20 trillion in transactions without any hacker attacks to date.

ChainCatcher news, according to The Block, the blockchain built by Jump Crypto is about to launch its first bug bounty program, Firedancer v0.1 ("Frankendancer"), a six-week bug bounty program that will start on July 10.It is reported that the program was announced by the anonymous developer Cantelope Peel and is supported by Immunefi, with a scale of $1 million.

ChainCatcher news, according to Cointelegraph, Bitcoin Core developers have launched a "Critical Bug" disclosure policy aimed at more effectively communicating about Bitcoin security vulnerabilities.In a letter sent on July 3 to members of the Bitcoin Development mailing list, Bitcoin Core developer Antoine Poinsot and five others stated: "The project has historically performed poorly in publicly disclosing security-critical vulnerabilities, whether reported externally or discovered by contributors. There is a dangerous perception that Bitcoin Core has no bugs, which is dangerous and, unfortunately, not accurate."

ChainCatcher news, according to official sources, Flow is about to launch the equivalent EVM Crescendo, aimed at connecting Flow to the EVM ecosystem to become one of the most scalable and powerful computing layers for developers.In addition, it is simultaneously launching a bug bounty program, seeking vulnerabilities in smart contracts, transactions, or scripts that may affect network stability or security, with the highest level bug bounty reaching $50,000.

ChainCatcher news, according to The Block, the ethical hacking bounty payouts of the Web3 vulnerability bounty platform Immunefi have exceeded $100 million.The team stated that this milestone was achieved approximately three years after Immunefi launched in December 2020, stemming from over 3,000 paid vulnerability bounty reports.

ChainCatcher news, based on zkRollup, the Ethereum Layer 2 network Taiko announced that it is drafting a new bounty program and is calling on all white hat hackers to participate in investigating the bugs in Taiko's Based Contestable Rollup (BCR) protocol and earn rewards.

ChainCatcher message, Ahmad Shadid, founder and CEO of the Solana ecosystem DePIN protocol io.net, stated that several users have discovered some significant bugs and technical issues in the current version of IO Cloud. The team is working hard to fix these reported issues. The team is adjusting its plans for the coming weeks as follows:A transparent proof-of-work process has been implemented to verify all devices in the network, and these logs will begin to be shared publicly this week;A public issue list will be published and maintained on the official website before the weekend, including a form for users to submit new issues. New bugs reported will receive a certain bounty, transitioning to a full bug bounty program in the coming weeks;The token release has been postponed until the vulnerabilities are resolved, and the officials are working with vendors to reconnect to the network, which is expected to take about two weeks. The team is committed to stabilizing and ensuring the core platform works properly before launching the token. This is in the best interest of the vendors, users, and the community;Resources will be allocated to calculate and display the rewards obtained by vendors in March and April, and the rewards for May will be updated in real-time in IO Worker;Efforts will continue to implement more intuitive, transparent, and clear metric reporting in the browser, with the team requested to revise metric names and add tooltips to avoid confusion.