Unistake is a decentralized token protocol built to empower DeFi projects and incentivize liquidity providers.

In scope

Target	Type	Severity	Reward
Multiplier https://etherscan.io/address/0xbc962d7be33d8afb4a547936d8ce6b9a1034e9ee	Solidity	Critical	Bounty
PoolStake https://etherscan.io/address/0x4ffb0e15dd08147cc64da9e73b24dc40b1a6c584	Solidity	Critical	Bounty
PoolStakeFactory https://etherscan.io/address/0xd67fd2dfe741b15bd93df796b66868347e887ba2	Solidity	Critical	Bounty

Target

Multiplier

https://etherscan.io/address/0xbc962d7be33d8afb4a547936d8ce6b9a1034e9ee

TypeSolidity

Severity

Critical

RewardBounty

Target

PoolStake

https://etherscan.io/address/0x4ffb0e15dd08147cc64da9e73b24dc40b1a6c584

TypeSolidity

Severity

Critical

RewardBounty

Target

PoolStakeFactory

https://etherscan.io/address/0xd67fd2dfe741b15bd93df796b66868347e887ba2

TypeSolidity

Severity

Critical

RewardBounty

Focus Area

In Scope

We are looking for evidence and reasons for incorrect behavior of the smart contract, which could cause unintended functionality:

Stealing or loss of funds
Unauthorized transaction
Transaction manipulation
Attacks on logic (behavior of the code is different from the business description)
Reentrancy
Reordering
Over and underflows

Perform testing only within the scope
Test only on private testnet, no testing for third party contracts
Only vulnerabilities that can lead to real issues are covered by the bug bounty program
In special cases, the size of the award can be increased if the researchers demonstrate how the vulnerability can be used to inflict maximum harm
Any details of found vulnerabilities must not be communicated to anyone who is not a HackenProof Team or an authorized employee of this Company without appropriate permission