📄

Report #27958

Report Date
January 22, 2024
Status
Confirmed
Payout
1,000

Attacker can steal one `root` at a time from other users

‣
Report Info

BIR-11: Stalk Ownership Griefing

BIC Response

After reviewing your bug report, we believe that it is in scope for our bug bounty program and the threat level is Medium.

Based on our bounty page, this submission's ( Smart Contract - Medium ) reward is based on a set of internal criteria established by the BIC (with a minimum reward of USD 1 000), primarily taking into account the exploitability of the bug, the impact it causes and likelihood of the vulnerability presenting itself.

The BIC determined that the impact of this issue is low given that roots cannot be redeemed for any underlying value and the costs of any form of an "attack" would not be profitable by a significant margin. Thus, the most applicable impact in scope is griefing and any "attack" related to this bug report would have an extremely low likelihood. For these reasons, the BIC has determined that this bug report be rewarded 1,000 Beans.