Hedera is a fully open source, proof-of-stake, public network and governing body for building and deploying decentralized applications. It offers developers three primary services: Solidity-based smart contracts, consensus, and token services. Hedera is unique in that it is incredibly fast, energy-efficient (carbon negative), and secure — these advantages can be attributed to its underlying hashgraph consensus algorithm.


Network not being able to confirm new transactions (total network shutdown)

Network partition caused outside of design parameters

Direct loss of funds

Increasing network processing node resource consumption by at least 30% without brute force actions, compared to the preceding 24 hours

Shutdown of greater than or equal to 30% of network processing nodes without brute force actions, but does not shut down the network

A bug in the respective layer 0/1/2 network code that results in unintended smart contract behavior with no concrete funds at direct risk

Unintended permanent freezing of funds

Any impact caused by Tampering/Manipulating Hashgraph history

Temporary freezing of network transactions by delaying one block by 500% or more of the average block time of the preceding 24 hours beyond standard difficulty adjustments

Preventing gossip of a transaction or multiple transactions

Reorganizing transaction history without direct theft of funds

Any impacts caused by Tampering with submitted transactions

Authorizing transactions without approval from signers/owners

Non-network-based DoS affecting projects with greater than or equal to 25% of the market capitalization on top of the respective layer

Incorrect or missing records exported to mirror nodes

Impacts caused by griefing with no economic damage to any user on the network

Theft of unpaid staking rewards

Modification of transaction fees outside of design parameters

__Suggestions for places to start__

- Ability to execute system commands
- Signing transactions for other users
- Redirection of user deposits and withdrawals
- Tamper/manipulate Hashgraph history to invalidate transactions
- Tampering with submitted transactions
- Authorizing transactions without approval from the required signers/owners
- Preventing network from reaching consensus on transactions that are submitted
- Preventing gossip of a transaction or multiple transactions
- Bugs that cause the in-scope service to crash (e.g., Non-network-based DoS)
- Remote code execution vulnerabilities
- Attacks that cause a probabilistic consensus failure; or a deterministic consensus failure in reconnected nodes
- Effective non-network-bandwidth-flooding DDoS attacks (e.g., transaction hammering)
- Malicious capabilities of Hedera Token Service functions exposed via System contracts (e.g. transferring assets out of an account without permissions).
- System Smart contract modifiers not respected
- Bugs in the economic system to defraud other participants (e.g. avoid transaction fees to full nodes)
- Prevent node from accessing the network
- Incorrect or missing records exported to mirror nodes
- Correct transaction fees not being applied
- Unauthorized Hedera Token Service (HTS) activity
- Overpayment or underpayment of staking rewards
- Theft of unpaid staking rewards
- Sensitive information leakage (e.g., private keys, wallets credentials etc). Public keys are excluded from this scope

Codebase

Hiero Open Source Repos

Documentation

__Reward Calculation for Critical Level Reports__

For critical Blockchain/DLT bugs, the reward amount is 10% of the funds directly affected, capped at the maximum critical reward [$30,000]. However, a minimum reward of USD [$10,000] is to be rewarded in order to incentivize security researchers against withholding on a bug report.