<\/p>\n
Subsequent to the hacking incident at DEVCON1<\/a>, \u00a0Martin Swende<\/a> currently holds the top position on the leaderboard of the Ethereum Bounty Program<\/a>. The bounty initiative is in progress and the most recent bounty granted<\/a> totaled 5 BTC. The program is accessible to all individuals. As BTC Relay<\/a> prepares for its deployment on Ethereum and its significance for various DApps, we would like to emphasize its active security review by incorporating it into the Ethereum Bounty Program.<\/p>\n <\/p>\n BTC Relay is an Ethereum contract that executes Bitcoin SPV: https:\/\/en.bitcoin.it\/wiki\/Thin_Client_Security<\/a><\/p>\n <\/p>\n The primary function of BTC Relay is to relay any adequately confirmed Bitcoin transaction to a designated Ethereum contract. If an individual executes a Bitcoin payment, or any arbitrary action on the canonical Bitcoin blockchain, the relay ought to be capable of transmitting it to any specified Ethereum contract. Further specifics in the spec<\/a>.<\/p>\n <\/p>\n The aim is to detect security vulnerabilities, such as the acceptance of invalid block headers, erroneous proofs, or illegal Bitcoin transactions. Likewise, if there is a valid Bitcoin transaction that BTC Relay fails to completely relay, it would also qualify for bounties.<\/p>\n <\/p>\n Please be informed that since BTC Relay has a distinct open-source bounty grant, significant bugs will receive rewards up to 1 BTC<\/b>. Substantially greater rewards are attainable (up to 5 BTC<\/b>) in instances of extremely critical vulnerabilities. Rewards are available to everyone except judges of the bounty program and developers of BTC Relay.<\/p>\n <\/p>\n The focus is on the contract, specifically the 5 \u201c.se\u201d files located in the root directory of:<\/p>\n <\/p>\n https:\/\/github.com\/ethereum\/btcrelay\/tree\/1466934855225b1e4a87031d299c1209ba12d503<\/a><\/p>\n <\/p>\n (This relates to a commit on <\/a>https:\/\/github.com\/ethereum\/btcrelay<\/a> develop branch).<\/p>\n <\/p>\n Not encompassed is full SPV client functionality (for instance, Bitcoin block timestamps are not verified to conserve gas costs). Enhanced methods for incentivization, gas costs, and other algorithmic optimizations are excluded from the scope. Nevertheless, any feedback on such matters will still be warmly welcomed.<\/p>\n <\/p>\n With BTC Relay now incorporated into the Ethereum bounty program, most regulations outlined at <\/a>http:\/\/bounty.ethdev.com<\/a> are applicable. For instance, websites are excluded from the bounty program, and submissions are processed on a first-come, first-served basis \u2013 issues that have already been reported by another contributor or are already recognized<\/a> by the team are not qualified for bounty rewards. However, this also implies that in addition to monetary incentives, every bounty is also eligible for:<\/p>\n <\/p>\n\n