Sherlock Yield Strategy Bug Bounty Post-Mortem
Sherlock Yield Strategy Bug Bounty Post-MortemNOTE FOR SHERLOCK LIQUIDITY PROVIDERS: This type of bug bounty payout does not impact any of the staking pool, and all staked funds used for Sherlock coverage remain unaffected.OverviewOn July 14th, 2022, GothicShanon89238 reported an issue to Sherlock through Immunefi concerning Sherlock's yield strategy integration with Euler. The issue has since been fixed.No funds were immediately at risk, but the issue could eventually have resulted in a...

What is Sherlock?
TL;DRSherlock is a new type of security solution for protocol teams. Sherlock provides teams with all the tools they need to securely launch decentralized apps:Audits from leading security firms and independent security expertsBug bounty paid for by SherlockSmart contract coverage for on-chain exploitsWith these tools, protocol teams are set up for success and can get back to building. Even further, the users of those protocols can sleep easier knowing there is recourse even if a bug slips th...

Security Expert Guide
This is the quick start guide for security experts interested in competing for $50k+ prize pools in Sherlock’s next-generation audit model.For the full details, check out the Audit section of the Sherlock docs.Good news: If you’ve competed in Code Arena in the past, this experience will be quite familiar. However, there are some differences:Only Medium and High severity bugs are rewardedThe top 10% on Sherlock’s leaderboard are eligible to be Lead Senior Watsons with $10k guaranteed pay per a...


Sherlock Yield Strategy Bug Bounty Post-Mortem
Sherlock Yield Strategy Bug Bounty Post-MortemNOTE FOR SHERLOCK LIQUIDITY PROVIDERS: This type of bug bounty payout does not impact any of the staking pool, and all staked funds used for Sherlock coverage remain unaffected.OverviewOn July 14th, 2022, GothicShanon89238 reported an issue to Sherlock through Immunefi concerning Sherlock's yield strategy integration with Euler. The issue has since been fixed.No funds were immediately at risk, but the issue could eventually have resulted in a...

What is Sherlock?
TL;DRSherlock is a new type of security solution for protocol teams. Sherlock provides teams with all the tools they need to securely launch decentralized apps:Audits from leading security firms and independent security expertsBug bounty paid for by SherlockSmart contract coverage for on-chain exploitsWith these tools, protocol teams are set up for success and can get back to building. Even further, the users of those protocols can sleep easier knowing there is recourse even if a bug slips th...

Security Expert Guide
This is the quick start guide for security experts interested in competing for $50k+ prize pools in Sherlock’s next-generation audit model.For the full details, check out the Audit section of the Sherlock docs.Good news: If you’ve competed in Code Arena in the past, this experience will be quite familiar. However, there are some differences:Only Medium and High severity bugs are rewardedThe top 10% on Sherlock’s leaderboard are eligible to be Lead Senior Watsons with $10k guaranteed pay per a...
Share Dialog
Share Dialog

Subscribe to Sherlock

Subscribe to Sherlock
Sherlock is excited to announce a long-awaited $10M collaboration with Euler Finance to protect Euler users from smart contract risk starting on the first day of launch. The Sherlock team has worked shoulder-to-shoulder with the talented devs at Euler over the last 3 months to get ready for the much anticipated launch.
Euler is part of the first cohort of protocols during Sherlock’s guarded launch. Each protocol gets access to $10M in smart contract coverage, a security assessment from top auditors, and a $1M ImmuneFi bug bounty provided by Sherlock.
Sherlock is a risk management platform built on Ethereum and designed to keep end users protected by providing affordable and scalable coverage to protocols.
Sherlock's partnership with Euler is exciting because Euler prioritizes all of the attributes that Sherlock looks for when deciding to cover protocols. As Euler announced, the initial launch is a guarded one specifically to minimize security risk.
The steps taken to secure Euler include:
$1MM ImmuneFi bug bounty provided by Sherlock
Audits from Solidified, ZK Labs, Halborn, Sherlock, and several other independent security experts
Formal verification by Certora
High test coverage
And of course, the guarded launch
Building a lending protocol in crypto is not an easy task by any means. Since the time Sherlock started working with Euler in September, many more risks have been exposed in lending markets. Cream Finance, one of the most popular lending markets in crypto, was hacked for over $130M and many expressed that Aave and Iron Bank had been vulnerable to the same exploit. Rari Capital’s Fuse markets were hacked last month (here’s a great writeup by the Sherlock Watson who led Euler’s security assessment).
The Euler team’s response to these new vulnerabilities has been nothing short of heroic. Not only was every new exploit angle broken down and assessed, but the team became bleeding edge experts on Uni V3 manipulation and published articles and papers about it. All while continuing to build towards their mainnet launch.
While Euler’s security practices are impressive and Sherlock finds this area extremely interesting, you’re probably wondering what Euler actually does.
Capital-Efficient, Permissionless Lending
Euler helps users earn interest on their crypto assets or hedge against volatile markets without the need for a trusted third party. This is extremely important and ground-breaking. Permissionless lending is a very new concept and 99.9% of human history has sadly existed without it. No more. Having no trusted third party means that even “centralized” oracles services are done away with, in favor of fully decentralized markets such as Uniswap.
Why is this cool?
Besides the obvious answer that it means you don’t have to trust third parties, there are some really exciting possibilities that get opened up:
Short-sell anything – A truly efficient market enables betting for and against an asset. This is not currently possible in crypto and opens up a whole new array of investing strategies.
Use leverage on anything – Euler’s swap module will allow users to put on one-click leveraged long and short positions on any collateral vs collateral asset pairs and one-click leveraged short positions on any collateral vs non-collateral pairs.
Earn interest on anything – Euler allows you to earn interest on any ERC-20 token, no matter how small.
Liquidity mine anything – Deposit eligible collateral and borrow anything that will result in liquidity mining rewards. By creating a lending market for everything, anyone can tap into farming without selling their high quality assets.
But that’s just the tip of the iceberg. Euler has innovated across every piece of lending markets including reactive interest rates, protected collateral, MEV-resistant liquidations, multi-collateral stability pools, sub-accounts, risk-adjusted loans and much more.
Keep up with Euler:
Read the whitepaper
See how Euler thinks about risks in lending protocols
Keep up with Sherlock:
Check out the docs
Keep an eye out for the V2 in early 2022!
Euler is a great example of the type of security-minded team that Sherlock looks for. We’re excited to watch Euler continue to grow and Sherlock will be there to provide more cover and other services every step of the way.
Sherlock is excited to announce a long-awaited $10M collaboration with Euler Finance to protect Euler users from smart contract risk starting on the first day of launch. The Sherlock team has worked shoulder-to-shoulder with the talented devs at Euler over the last 3 months to get ready for the much anticipated launch.
Euler is part of the first cohort of protocols during Sherlock’s guarded launch. Each protocol gets access to $10M in smart contract coverage, a security assessment from top auditors, and a $1M ImmuneFi bug bounty provided by Sherlock.
Sherlock is a risk management platform built on Ethereum and designed to keep end users protected by providing affordable and scalable coverage to protocols.
Sherlock's partnership with Euler is exciting because Euler prioritizes all of the attributes that Sherlock looks for when deciding to cover protocols. As Euler announced, the initial launch is a guarded one specifically to minimize security risk.
The steps taken to secure Euler include:
$1MM ImmuneFi bug bounty provided by Sherlock
Audits from Solidified, ZK Labs, Halborn, Sherlock, and several other independent security experts
Formal verification by Certora
High test coverage
And of course, the guarded launch
Building a lending protocol in crypto is not an easy task by any means. Since the time Sherlock started working with Euler in September, many more risks have been exposed in lending markets. Cream Finance, one of the most popular lending markets in crypto, was hacked for over $130M and many expressed that Aave and Iron Bank had been vulnerable to the same exploit. Rari Capital’s Fuse markets were hacked last month (here’s a great writeup by the Sherlock Watson who led Euler’s security assessment).
The Euler team’s response to these new vulnerabilities has been nothing short of heroic. Not only was every new exploit angle broken down and assessed, but the team became bleeding edge experts on Uni V3 manipulation and published articles and papers about it. All while continuing to build towards their mainnet launch.
While Euler’s security practices are impressive and Sherlock finds this area extremely interesting, you’re probably wondering what Euler actually does.
Capital-Efficient, Permissionless Lending
Euler helps users earn interest on their crypto assets or hedge against volatile markets without the need for a trusted third party. This is extremely important and ground-breaking. Permissionless lending is a very new concept and 99.9% of human history has sadly existed without it. No more. Having no trusted third party means that even “centralized” oracles services are done away with, in favor of fully decentralized markets such as Uniswap.
Why is this cool?
Besides the obvious answer that it means you don’t have to trust third parties, there are some really exciting possibilities that get opened up:
Short-sell anything – A truly efficient market enables betting for and against an asset. This is not currently possible in crypto and opens up a whole new array of investing strategies.
Use leverage on anything – Euler’s swap module will allow users to put on one-click leveraged long and short positions on any collateral vs collateral asset pairs and one-click leveraged short positions on any collateral vs non-collateral pairs.
Earn interest on anything – Euler allows you to earn interest on any ERC-20 token, no matter how small.
Liquidity mine anything – Deposit eligible collateral and borrow anything that will result in liquidity mining rewards. By creating a lending market for everything, anyone can tap into farming without selling their high quality assets.
But that’s just the tip of the iceberg. Euler has innovated across every piece of lending markets including reactive interest rates, protected collateral, MEV-resistant liquidations, multi-collateral stability pools, sub-accounts, risk-adjusted loans and much more.
Keep up with Euler:
Read the whitepaper
See how Euler thinks about risks in lending protocols
Keep up with Sherlock:
Check out the docs
Keep an eye out for the V2 in early 2022!
Euler is a great example of the type of security-minded team that Sherlock looks for. We’re excited to watch Euler continue to grow and Sherlock will be there to provide more cover and other services every step of the way.
<100 subscribers
<100 subscribers
No activity yet