Immunefi, a leading onchain crowdsourced security platform, and the Ethereum Foundation have unveiled the 'Attackathon,' a significant initiative aimed at bolstering the security of Ethereum's protocol. This collaboration marks the first-ever large-scale crowdsourced security audit contest dedicated to enhancing the security of the blockchain's entire codebase.
The Attackathon is a time-bound code review program orchestrated by Immunefi, which aims to attract top-tier security researchers. The program also includes a comprehensive community education component focused on Ethereum-related security and technology. Ethereum, launched in 2015, is a decentralized, open-source blockchain platform that enables developers to build and deploy smart contracts and decentralized applications (dApps). The platform is known for its secure and transparent environment, fostering innovation across various sectors including finance, gaming, and supply chain management.
Immunefi and the Ethereum Foundation have invited the Ethereum community, including ecosystem projects and developers, to sponsor the program by contributing to its reward pool. Unique digital memorabilia and specific benefits based on sponsorship tiers will be offered to participants. The Ethereum Foundation has already seeded the reward pool with a $500,000 contribution. Members of the Immunefi and Ethereum community can participate in the sponsorship program and track the sponsor leaderboard on Immunefi's website.
The funds collected in the sponsored pool will be deposited directly into the Attackathon vault on Immunefi. This proprietary solution is designed to transparently display the allocation of the program's funds and streamline the payment process between projects and security researchers. The sponsorship program will close, and the final reward pool will be locked by August 1, 2024, after which further details of the Attackathon will be announced.
"As part of our efforts to help further secure the Ethereum Protocol, we are excited to launch the first audit competition targeting the protocol itself, and can't wait to see what types of vulnerabilities it will surface!" said Fredrik Svantes, Protocol Security Research Lead at the Ethereum Foundation.
Immunefi operates the largest web3 security community with over 45,000 researchers and protects over $190 billion in user funds for projects like Chainlink, Wormhole, MakerDAO, TheGraph, Synthetix, Polygon, and Optimism. The platform has paid out more than $100 million in bug bounties while saving over $25 billion in user funds. Immunefi offers over $161 million in bounty rewards, and 80% of projects find vulnerabilities missed by audits through Immunefi's researchers.
"Ethereum is fundamentally transforming the world as we know it and will continue to do so," said Mitchell Amador, Founder and CEO of Immunefi. "We are incredibly proud to partner with the Ethereum Foundation and do our part to contribute to the vision of an open, more efficient, and decentralized future. By leveraging our collective security expertise and resources, we aim to ensure the integrity and security of the Ethereum network."
Sajjad Rehman, VP of Revenue at Immunefi, added, "We're bringing together the world's top security community to safeguard one of the most significant blockchain technologies ever created. This commitment will not only bolster the security of the technology itself but also strengthen the trust and confidence of Ethereum's growing global user base."
The Attackathon will also feature an educational component, offering resources such as Ethereum technology and security explainers, and a dedicated guide on the Attackathon. These resources aim to enhance accessibility for the broader security researcher community and deepen their engagement within the Ethereum ecosystem.
