Bug Bounty

Whitehack2earn (h2e). Use your skills for the good of web3. Make the world a better and get profit.

***

Reporting form.

***

Already 780,000 NIFTSY tokens have been paid out for bugs found

***

Tested directions of the applications:

• operation of each implemented functionality

• interaction with crypto wallets

• dAapps interaction with backend

Prerequisites:

• testing and troubleshooting to perform in Chrome, Firefox browsers?

• Metamask transaction wallet

List of applications to search for bugs:

• https://appv1.envelop.is/list

• https://appv1.envelop.is/mint/

• https://appv1.envelop.is/saft

***

Frontend levels of bug severity:

• Blocker (S1). Such an error makes it impossible to proceed with using or testing the software. There aren't any ways to work around it.

• Critical (S2). It is an incorrect functioning of a particular area of business-critical software functionality. There is an alternative way to work around it.

• Major (S3). An error has a significant impact on an application, but other inputs and parts of the system remain functional, so you can still use it. At the same time, there is more than one entry point to initiate the desired functionality

• Minor (S4). A defect is confusing or causes undesirable behavior but doesn’t affect user experience significantly. Many UI/UX bugs belong here.

• Low/Trivial (S5). A bug doesn’t affect the functionality or isn’t evident. It can be a problem with third-party apps, grammar or spelling mistakes, etc.

***

Level	Rewards (wNFT with NIFTSY as collateral )	Time-lock (Weeks)
S1	150 000	40
S2	50 000	20
S3	20 000	10
S4	7 000	4
S5	2 000	2

***

At Envelop, we classify bugs on a widely used scale. For version 1 of the protocol, we identify the following directions of attack:

Critical

• Blocking to user unwrapping of wNFT and getting collateral

• User`s funds losing during wrapping or adding collateral

• Withdrawing tokens of collateral without unwrapping of own or someone else's wNFT

• Withdrawing original NFT without unwrapping of own or someone else's wNFT

• Getting collateral tokens during unwrapping of wNFT more than was added in it

• Increasing amount of collateral tokens in accounting registers of smart contracts

• Decreasing amount of collateral tokens in accounting registers of smart contracts

• Changing owner of smart contracts

• Withdrawing native tokens from smart contracts addresses of protocol

• Withdrawing ERC20 tokens from smart contracts addresses of protocol

• Withdrawing ERC721 or ERC1155 tokens from smart contracts addresses of protocol

High

• Unauthorized Adding address of smart contract in whiteList

• Unauthorized Adding address of smart contract in blackList

Medium

• Unbounded gas consumption

• Increasing of gas consumption with every next operation

• Blocking possibility to wrap NFT

• Blocking possibility to add collateral to wNFT

Low

• Creation of conditions to get-methods return wrong data

Level	Rewards, wNFT with NIFTSY as collateral	Time-lock, week
Critical	1 000 000	40
High	400 000	20
Medium	100 000	10
Low	25 000	4