[New Audit] VOOX launches DualDefense Contest With Up to $29,000 on HackenProof

What is DualDefense

DualDefense is a service that combines traditional security audit services with HackenProof crowdsourced audits, powered by the community. After your main audit, HackenProof bug hunters additionally review your code. If critical bugs are found during the Crowdsourced Audit period, rewards are covered by the DualDefense Flash Pool community of stakers, preventing costs from being shifted to the project.

Auditors, the community of stakers, and bug hunters — all working together to protect your systems. By participating in DualDefense, VOOX ensures maximum protection for its platform and engages the security research community to identify vulnerabilities before they can affect users.

Last Audit

Since DualDefense Audit always follows the traditional audit, the last VOOX audit has already been done by Hacken.

VOOX Enters the DualDefense Arena

VOOX, established in 2022, is a global innovative cryptocurrency exchange platform driven by AI technology with trading at its core.

Focus Area

This DualDefense is focused on Web. Here are the vulnerabilities in scope:

• Payments manipulation, which can lead to loss of user/platform funds
• SQLi, with PII leakage or balance manipulation
• Remote code execution (RCE) on “In-scope” domains
• Business logic issues that can cause a loss of user funds/assets

Bounty Breakdown

As part of the DualDefense program, VOOX will reward security researchers for discovering critical vulnerabilities that could put the system or its users at risk.

• Critical bugs: up to $29,000 per valid submission.

Other findings may be acknowledged, but rewards are reserved exclusively for critical issues.

How to Participate

DualDefense starts on February 28, 2025 and will run until March 27, 2025. VOOX is already looking forward to your findings, so you can join the program and submit your reports here.