Jul 8, 2020 - Sep 8, 2020
This hackathon event had ended at Sept. 8, 2020, 11:59 p.m., please check the ongoing hackathons.
Matic Network is a layer2 platform which aims to provide a generalized Layer2 platform to provide various layer2 execution environments to Dapp Developers on top of Ethereum. Being a layer2, Matic Network staking, validation, staking reward distribution and slashing happens on Ethereum Mainnet. Matic Layer2 Security hackathon is designed to promote expert smart contract developers to have a close look and hunt for critical bugs.
The hackathon provides opportunity for the developers to delve deep into the nuances of building a secure layer2 platform and explore ways to break staking and plasma smart contracts. Prizes will be paid out on an ongoing basis.
There are four tiers of prize ranges. Each bounty submission could be eligible for any one of the prize tiers.
In addition, for this competition, the Matic team will apply a bounty multiplier
ratio between 1 and 10
, which can make the final payout up to $50,000. This multiplier ratio will be decided at the sole discretion of the Matic team.
Judging criteria will take into consideration:
Please note that the prizes will be paid in Matic tokens and the USD value of prizes could change based on the rate.
Exploits:
Exploits: These bounties help us identify vulnerabilities in our design and code, especially in our staking and delegation related smart contracts. The goal is to find attack vectors by which an attack can either lead to partial theft of funds or draining of funds from the contract. There may be more attack vectors too, we have just added indicative ones.
Scope for reference:
Staking: https://docs.matic.network/docs/contribute/contracts/stakingmanager
Delegation: https://docs.matic.network/docs/contribute/contracts/delegation
Code: https://github.com/maticnetwork/contracts/tree/release-0.3/contracts/staking
Root chain contract (for checkpoints): https://docs.matic.network/docs/contribute/heimdall/checkpoint
Code: https://github.com/maticnetwork/contracts/blob/release-0.3/contracts/root/RootChain.sol
Note that all Plasma contracts are Out of Scope for this hackathon.
Details of contracts deployed on Goerli: https://static.matic.network/network/testnet/mumbai/index.json
(see Main->Contracts
key for reference)
Important Contract Addresses:
Rootchain: https://goerli.etherscan.io/address/0xCe29AEdCdBeef0b05066316013253beACa7A6268#code
RootchainProxy: https://goerli.etherscan.io/address/0x2890bA17EfE978480615e330ecB65333b880928e#code
StakeManager: https://goerli.etherscan.io/address/0xb36b6963f68dde1312a9e959817e35ff6b0f0aa9#code
Stakemanager proxy: https://goerli.etherscan.io/address/0x00200ea4ee292e253e6ca07dba5edc07c8aa37a3#code
ValidatorShare: https://goerli.etherscan.io/address/0xb6d4B5893729601759be67ed98896EF928e5EC88#code
Setting up Local environment:
https://github.com/maticnetwork/contracts/blob/release-0.3/README.md
Reach out to us for any queries:
If you have any questions, please join our Discord Channel and post your queries in the Developers->contracts
channel: https://discord.gg/ujFqsjK
Visit the Prize Explorer to check out the prizes posted by our hackathon sponsors. Click each prize to show important details, including the submission requirements, submission deadline, etc.
Chat with other hackers, ask sponsors and the Gitcoin team questions, find or create a team, and communicate real-time. Click here to join the party!
When your team is formed please have one of your teammates navigate to each prize page you plan to compete for and click the “Start Work” button.
Build your cool ideas and make your vision come true with your team!
When your project is completed, submit your work by clicking the “Submit Work” button on the prize page/
Tell us a little about you:
Our tools are based on the principles of earn (💰), learn (📖), and meet (💬). Select the ones you are interested in. You can change it later in your settings.
Gitcoin products can help grow community around your brand. Create your tribe, events, and incentivize your community with bounties. Announce new and upcoming events using townsquare. Find top-quality hackers and fund them to work with you on a grant.
These are the organizations you own. If you don't see your organization here please be sure that information is public on your GitHub profile. Gitcoin will sync this information for you.
Select the products you are interested in:
Out of the box you will receive Tribes Lite for your organization. Please provide us with a contact email: