Hashflow-logo

Hashflow

Hashflow is the most powerful DeFi trading experience that gives you tight spreads, zero slippage and MEV-resistance.

Arbitrum
Avalanche
BSC
ETH
Optimism
Polygon
Solana
Defi
DEX Aggregator
Staking
Maximum Bounty
$40,000
Live Since
29 March 2022
Last Updated
18 November 2024
  • PoC required

Select the category you'd like to explore

Assets in Scope

Target
Type
Websites and Applications
Added on
4 May 2022

Impacts in Scope

Severity
Critical
Title

Ability to execute system commands

Severity
Critical
Title

Extract Sensitive data/files from the server such as /etc/passwd

Severity
Critical
Title

Signing transactions for other users

Severity
Critical
Title

Redirection of user deposits and withdrawals

Severity
Critical
Title

Subdomain takeover resulting in financial loss (applicable for in-scope subdomain with user wallet addresses published)

Severity
Critical
Title

Direct theft of user funds

Severity
Critical
Title

Wallet interaction modification resulting in financial loss

Severity
Critical
Title

Tampering with transactions submitted to the user’s wallet

Severity
Critical
Title

Submitting malicious transactions to an already-connected wallet

Severity
High
Title

Spoofing content on the target application (Persistent)

Severity
High
Title

Users Confidential information disclosure such as Email

Severity
High
Title

Privilege escalation to access unauthorized functionalities

Severity
Min. - Max.
Critical
$40k
High
$20k
Medium
$5k
Low
$1k
Total Assets in Scope
1
Total Impacts in Scope
17