Security

dYdX Web App + API Indexer Pen Test

Funding amount

$35,000

Start date

July 2024

Execution

1 month

Description

This grant will fund a full penetration test of the dYdX frontend and indexer codebases, neither of which were formally audited as part of the dYdX v4 launch. Halborn will run a deep dive on both codebases in an effort to find and disclose any vulnerabilities with these critical pieces of dYdX infrastructure. A report will be shared with the DEP, the DOS, and the dYdX Trading team with recommendations on how to patch any vulnerabilities identified through this exercise.

Purpose

Payment structure

Useful Links

Impact & Metrics