Bug Bounty
Ƙimar bayyanawa mai alhakin da jagorancin tasirin tattalin arziki don binciken tsaro na Avana.
Bayani
Avana Bug Bounty yana ɗaukar alhakin bayyanawa a cikin kwangiloli, tsarin haɗari, da tallafawa abubuwan more rayuwa waɗanda zasu iya shafar kuɗin mai amfani ko warwarewar yarjejeniya.
Saboda Avana yana amfani da matsayi na liquidation na AMM azaman abin jingina, iyaka ya haɗa da duka kwangilolin kwangilar kai tsaye da gazawar inda za'a iya juyar da ƙima, farashi, ko yanayin kasuwa zuwa mummunan ƙimar haɗin gwiwa ko karyar liquidation.
Tsanani shine farkon tattalin arziki:yana ba da lada ga cin nasara da sakamako kamar asarar kuɗi, rashin biyan kuɗi, bashi mara kyau, ko ɓarnatar kuɗi na tsari, ba kawai girman girman canjin lambar ba.
Girma & Tsarin Gine-gine
An raba iyaka zuwa ƙananan tsarin don haka masu bincike za su iya taswirar ganowa zuwa ɓangaren ɗimbin abin da a zahiri ke barazanar: babban lamuni, ƙimar LP, mulki da gudanarwa, ko haɗin kai na waje.
Shirin A - Babban Lamuni
Yana rufe injin ƙirƙira na farko inda amincin lissafin kuɗi, haɗin kai, da aiwatar da kisa ke kare kuɗin mai amfani kai tsaye.
Ya haɗa
- Deposit / janye gudana
- Aron / biya dabaru
- Kiwon lafiya factor da sha'awa tara
- Ajiye lissafin kudi da bashi mint / ƙone
- Liquidation core kisa da iyakoki
Manyan hadari
- Satar kudaden masu amfani
- Ajiye rashin biyan kuɗi
- Karɓar rance
- An toshe biyan kuɗi, cirewa, ko kuma biyan kuɗi
Shirin B - LP Lantarki & Ƙimar
Yana rufe tsarin ƙima na musamman na Avana don ƙididdigewa na LP, gami da yadda aka sanya farashin matsayi na LP, haɗarin haɗari, da gwajin damuwa a ƙarƙashin yanayin kasuwa mara kyau.
Ya haɗa
- LP token onboarding logic
- Abubuwan da aka ba da izini don matsayi na LP
- LP share pricing and oracle integration
- Matsakaicin matsakaicin matsayi mai kulawa
- Matsalolin gefen lokacin rashin daidaituwa, depegs, low liquidity, ko stale oracle states
Manyan hadari
- Ƙimar ƙima ta LP
- Yin amfani da Oracle yana ba da damar bashi mara kyau
- Rashin adalci daga rashin farashi
- Hanyoyi masu maimaitawa akan abin da ba a so ba na LP
Me ya sa yake da muhimmanci: Mafi girman girman rufi: LP mispricing na iya haifar da mummunan bashi, rashin ƙarfi, ko rashin adalcin liquidation ba tare da magudanar kwangilar gargajiya ba.
Shirin C - Gudanarwa, Gudanarwa, da Kayayyakin Ka'idoji
Yana rufe saman gata na sarrafawa wanda zai iya canza sigogi, haɓaka kwangila, dakatar da ayyuka, ko tura kadarori mallakar yarjejeniya.
Ya haɗa
- Mai aiwatar da mulki da kulle lokaci
- Gudanar da rawar aiki da hanyoyin haɓakawa
- Dakata / matsayin mai kulawa
- Parameter admin Systems
- Baitul mali, mai tarawa, da kwangilolin sarrafa kayan aiki masu gata
Manyan hadari
- Ayyukan gudanarwa mara izini
- Haɓaka fashi
- Cin hanci da rashawa
- Daukar mulki ko asarar dukiya
Shirin D - Abubuwan Haɗin Kai / Haɗin kai
Yana rufe tsarin tallafi wanda sasantawa zai iya yin tasiri ga amintattun ayyukan ƙa'idar, hulɗar mai amfani, ko halayen masu kiyayewa.
Ya haɗa
- Indexing ko liquidation bots kiyaye ta Avana
- Zato mai kiyayewa da baƙar magana
- SDK logic that can induce unsafe interactions
- APIs ɗin da aka karɓa ana amfani da su a cikin mahimman hanyoyin aminci
- Matsalolin gaba tare da sakamakon haɗarin walat kai tsaye
Manyan hadari
- Malicious ma'amala gina
- Rarraba liquidation ko hanyoyin ba da baki
- Asarar asusun mai amfani ta hanyar haɗin gwiwar amintattu
- Ficewar aiki wanda ke daskare ayyuka masu mahimmanci
An rarraba ƙananan tsarin daban-daban, amma har yanzu ana samun tasiri a duk faɗin rashin ƙarfi, amincin asusun mai amfani, daidaiton liquidation, da haɗarin yarjejeniya mai alaƙa.
Tsananin Falsafa
Ƙididdigar rashin ƙarfi na gabaɗaya ba shine babbar hanyar daraja ba a nan. Ana yin la'akari da abubuwan da aka gano ta hanyoyi masu sahihanci da kuma sakamakon tattalin arziki da za su iya haifarwa.
Mai tsanani
Asarar asusu kai tsaye ko kai tsaye, ƙirƙirar bashi mara kyau, rashin biyan yarjejeniya, ko yin amfani da tsarin ƙima.
Babba
Lalacewa mai ma'ana amma mai iyaka, kamar halayya ta liquidation ba daidai ba, keɓancewar ɓangaren sarrafa haɗari, ko gazawar lissafin kuɗi.
Matsakaici / Ƙasa
Bincike mai iyaka-tasiri, rashin daidaituwa, rashin daidaituwa, batutuwa marasa mahimmanci, ko lahani ba tare da ingantaccen hanyar da za ta iya haifar da babbar illa ga tattalin arziki ba.
A bug that looks small in code can still be critical if it enables LP overvaluation or bad debt. A technically interesting issue can rank lower if it does not have a credible path to meaningful financial damage.