Bug Bounty Postmortem Report
Below is a detailed record of resolved and successfully paid out bug bounties, Each bounty includes information on time of resolution, brief description of the issue, its severity, and reward paid out
2024-12-21
A valid signature is used to authorize ETH withdrawals, but no check is made to ensure msg.sender matches the intended trader. Attackers could front-run transactions using the same signature to receive the funds.
High
$10,000
2025-3-17
Click Jacking vulnerability on Wallet Connect Feature and Entire Website
Medium
$1000
2025-2-24
DOS vulnerability within API implementation, which could exhaust server capacity, leading to service disruption
Medium
$2000
2025-3-14
Vulnerability in the API interface can cause misconfigurations in the back-end server, leading to timeouts. This flaw can be exploited to crash the API interface affecting the entire Web/App platform.
Medium
$1640
2025-5-8
Vulnerability of websocket endpoint to DoS attacks,allowing unauthorized requests capable of affecting the entire trading platform
Medium
$2000
Last updated