Uniswap Labs offers bug bounty worth up to $15.5 million

Uniswap Labs said it has launched the "largest bug bounty in history."

"We're rewarding up to $15.5 million to anyone that finds a critical vulnerability in v4 core contracts," the firm said in a post to X on Tuesday.

Crypto bug bounty programs invite developers and security researchers to examine a project's code to identify potential breaches or vulnerabilities. Projects will then reward people for their discoveries.

As of June of this year, the web3 security services platform Immunefi had paid out over $100 million to ethical hackers and researchers. Its highest overall payout related to the same bug came in at nearly $15 million, according to data at the time.

According to The Block Data Dashboard, DeFi attackers had stolen about $3.6 billion since 2020 as of October.

In a blog post, Uniswap Labs provided more information on its bug bounty program.

"The program includes vulnerabilities and bugs in any deployed Uniswap contract and the main branch of the specified undeployed v4-core contracts," the firm said in its post. "However if you find a bug in a Uniswap smart contract outside of these repositories, where user funds are at risk, the team will consider the issue to be in-scope for our bounty as an Other Uniswap Contract Code."

In 2022, Uniswap blocked crypto addresses because they were connected to stolen funds or transaction-mixing services like Tornado Cash, which the U.S. Treasury had sanctioned.