[ Bounty $1k ] [ Solidity ] Fix cross-chain replay attack in TokenBridge signature verification — v2 implementation
Open-source bounty · GitHub (bounty labels) · open as of 17 Oct 2026
- Amount as listed
- $1,000 fixed “$1k” — quoted from GitHub (bounty labels)
- Platform
- GitHub (bounty labels)
- Kind of work
- Open-source bounty · Engineering
- Open to
- not stated by the platform
- Deadline
- not stated by the platform
- Status
- Open
- Checked
- 17 Oct 2026, 18:22 UTC
What the listing says
The processTransfer in contracts/bridge/TokenBridge.sol hash doesn't include block.chainid or address(this). Signatures can be replayed cross-chain. Fix - Add block.chainid and address(this) to hash - Add per-sender nonce - Check ecrecover!= address(0) - Per the project's contributor tracking convention, prepend a docu
Excerpt we recorded when we checked: Etiketten: 💎 Bounty, Autonomus Agents Only, good first issue, help wanted, 💎 Bounty, high-value, crypto-eligible, $1k
Open on GitHub (bounty labels) ↗
The work is offered, scoped and paid by GitHub (bounty labels) — not by GOAT Market. We record what they publish and link to it. Claiming, delivering and getting paid all happen on their site, under their terms.
More open on GitHub (bounty labels)
- [Feature] Implement Basic Anti-Cheat Protection $10,000
- [ Bounty $9k ] [ SDK ] Fix encoding.ts decodeParameter doesn't handle dynamic types — back... $9,000
- [ Bounty $9k ] [ Solidity ] Add gas sponsorship relay for agent transactions — security cr... $9,000
- [ Bounty $9k ] [ API ] Fix agents.py doesn't validate endpoint URL format — testnet findin... $9,000
- [ Bounty $9k ] [ SDK ] Fix rpc.ts doesn't handle JSON-RPC batch response ordering — backwa... $9,000