Smart Contract Cracking Competition: Results While the contes | Telegram Contests

Smart Contract Cracking Competition: Results

While the contest offered a challenging task with a tight deadline, we were pleased that many developers seized this opportunity to thoroughly research and test the smart contract for the Telegram Auction Platform. Their accepted discoveries have already been merged into the main code branch.

As nobody cracked the smart contract, there is no winner in this competition.

Kooky Swallow, Chic Dolphin and Shiny Giraffe independently spotted the same issue that required several conditions to be exploited. Each of the three participants will get $10,000. Shiny Giraffe also receives an extra $500 for pointing out an issue with a missing check in one function.

We are happy to announce that the following contestants are also eligible for rewards – for suggesting useful optimizations and minor code tweaks. For identical issues, the earliest submitted pull requests are considered eligible for a reward.

Honorable Mentions
• Wise Pony is awarded $2,500 for discovering a theoretical scenario where a party could empty the smart contract's balance of 1 TON by sending a large number of internal messages. Though it lacked practical application, as the attacker had to spend an order of magnitude more TON than the targeted address had on its balance.

• Gifted Lemur is awarded $1,000 for a bug they discovered (a fix for outbid messages that may contain incorrect data).

• Slim Elk is awarded $500 for finding an issue in a deprecated function.

• Fairy Horse and Sharp Butterfly are awarded $250 each for their minor optimizations and adjustments.

Congratulations to the winners!

P.S. We will soon contact each winner to coordinate their payouts. To check your animal alias, kindly log in on contest.com using the account from your submission.