Quantstamp Community Update August 2019

This article was first published on quantstamp - Medium
-----

Releasing our Bounty Protocol, speaking at DEFCON- it’s been an exciting month at Quantstamp.

Here’s what’s been going on:

Open Sourcing our Bounty Protocol

We are open sourcing the code for our Bounty Protocol. A bounty protocol is a marketplace for developers to identify bugs in smart contracts that automation cannot detect. The Bounty Protocol has the potential to leverage software engineering talent from around the world to add an essential layer of infrastructure for blockchain security.

In the Bounty Protocol, Bounty providers submit their smart contract to the protocol and offer a bounty. Bug hunters can then review the smart contract code and report vulnerabilities if they find them. Judges, selected via a TCR, then vote to decide if the bug hunter reported a valid vulnerability. If the judges vote in favor of the bug hunter, they receive the bounty.

Along with the Quantstamp Security Network, the Bounty Protocol aims to add another facet of crypto-economic driven security to help scale security to the needs of the blockchain industry. Find out more about the details of the Bounty Protocol in the blog post or check out the Github page.

What is a Re-Entrancy Attack?

Recently, we published a blog post on re-entrancy vulnerabilities. One of the first types of smart contract vulnerabilities to be exploited, a re-entrancy vulnerability was responsible for the DAO hack in 2016.
This blog post, based on an excerpt from our book “Fundamentals of Smart Contract Security”, explains what re-entrancy vulnerabilities are, and how to prevent them. Read more.

Jan Gorzny Speaks at DEFCON

Blockchain Researcher Jan Gorzny spoke recently in Las Vegas at DEFCON. DEFCON is the premier cybersecurity conference and he presented some of his learnings about smart contract security while working at Quantstamp.

MOBI VID Standard

Recently, MOBI, the mobility open blockchain initiative​ which we are a part ...

-----
To keep reading, please go to the original article at:
quantstamp - Medium

Comments (No)

Leave a Reply