Topic: [BUG BOUNTY][ICO] Cointed Token Audit (100k € reward!) (Read 1467 times)
Hi. You might be interested in the upcoming Aegis Platform. We are building a site that allows smart contract authors to perform reasonably priced smart contract triple audits (expert audits, automated audits and bug bounty audits). Check us out at www.aegissmartcontracts.com, whether you are a smart contract author or a bounty collector.
□□□□□□ □□□□□□□ □□□□□□.
WARNING: Before investing read this:
https://www.generalbytes.com/cointed/
An open letter from one of Cointed's largest suppliers... Numbers not adding up, not having their own ATM or Point of Sale and instead just rip the label of GENERAL BYTES products and present it as their own... INVESTORS WILL BE DUPED into buying into an empty shell, a company in Hong Kong.... All business GENERAL BYTES has ever done is via the Austrian GMBH. The Hong Kong LTD has zero ATMs.... Investors are hold a bait and switch, making them think they invest in the ATMs but instead they sent their money to an empty shell...
DO NOT INVEST IN THE COINTED ICO... YOU ARE BEING SCAMMED!
https://www.generalbytes.com/cointed/
An open letter from one of Cointed's largest suppliers... Numbers not adding up, not having their own ATM or Point of Sale and instead just rip the label of GENERAL BYTES products and present it as their own... INVESTORS WILL BE DUPED into buying into an empty shell, a company in Hong Kong.... All business GENERAL BYTES has ever done is via the Austrian GMBH. The Hong Kong LTD has zero ATMs.... Investors are hold a bait and switch, making them think they invest in the ATMs but instead they sent their money to an empty shell...
DO NOT INVEST IN THE COINTED ICO... YOU ARE BEING SCAMMED!
good project will see next
Please be very cautious when investing in cointed. They have been manipulating their fees: https://bitcointalksearch.org/topic/m.17429694
After that post they disappeared from the forum.
Also, they are lying about the original owners and founders of the company. On archive.org you can see several snapshots of the site, which proves that Matthias Rhinow was co-founder along with Christopher Rieder. http://web.archive.org/web/20160519043109/http://cointed.com:80/
In addition, I have also posted on their Facebook site with suspicions about buying likes and followers on Facebook. The comments got deleted and the "review function" disabled.
I don't think a company that once advertised themselves as the "most trusted trader of Europe" should tell any lies and should come up and explain.
After that post they disappeared from the forum.
Also, they are lying about the original owners and founders of the company. On archive.org you can see several snapshots of the site, which proves that Matthias Rhinow was co-founder along with Christopher Rieder. http://web.archive.org/web/20160519043109/http://cointed.com:80/
In addition, I have also posted on their Facebook site with suspicions about buying likes and followers on Facebook. The comments got deleted and the "review function" disabled.
I don't think a company that once advertised themselves as the "most trusted trader of Europe" should tell any lies and should come up and explain.
I saw that you are offering ATM services for BTC. Do you know that this needs a license in Germany and other countries for example? Hence, the German Financial Market Authority (BaFin) will not let you raise funds from German investors. The same is true for some other EEA countries and U.S.
How do you plan to offer your coins/tokens in these countries? Are you doing a White Listing for countries?
How do you plan to offer your coins/tokens in these countries? Are you doing a White Listing for countries?
Cointed is aware that for the installation of BTC ATM's in Germany a Financial services license is necessary. Cointed is already in contact with the BaFin. Cointed Ltd is a company based in Hong Kong. Participation of US, China and Hong Kong based ICO particpants is not allowed. I will post more details and links to the website once we announce, please wait a bit longer
I saw that you are offering ATM services for BTC. Do you know that this needs a license in Germany and other countries for example? Hence, the German Financial Market Authority (BaFin) will not let you raise funds from German investors. The same is true for some other EEA countries and U.S.
How do you plan to offer your coins/tokens in these countries? Are you doing a White Listing for countries?
How do you plan to offer your coins/tokens in these countries? Are you doing a White Listing for countries?
We are also looking forward to this, we will announce details in the coming days.
Hmm, I am really looking forward to this project to meet Charli and Daniil on the #ICO street.
Anyother bounty ...classic project.
Hey,
not at this point, stay tuned, will come soon
not at this point, stay tuned, will come soon
EDIT 1:
Result of the Cointed (CTD) Token Bug Bounty program
Dear Issue reporters,
We want to thank everyone who contributed in the CTD smart contract Bug Bounty program.
Before Cointed published the CTD smart contract for public review, we had already charged the independent Swiss IT security company ChainSecurity with auditing the CTD smart contract. No serious bugs were found during this review. The public audit document of this review can be found here.
For the sake of transparency and impartiality, Cointed also charged ChainSecurity with the task to assess the severity of all issues reported as a result of the CTD Bug Bounty program.
The final result of the review is as follows:
Neither Cointed, nor ChainSecurity were able to find any “bug” in the issues, which have been reported.
Despite the fact that none of the reported issues represented what could be considered a “bug”, we still decided to change the contract’s code based on certain reports, because we care about deploying the most beautiful and clean code possible.
As a Thank-You for their work, we decided to compensate the issue reporters who suggested these changes anyway. The following issues have influenced the latest changes to the smart contract:
#5 by merlox: Overflowing issues and related ( … 3 issues )
… Cointed’s Thank-You: 2 ETH
#2 & #3 by pauliax: function Approve in StandardToken.sol & Mark functions with a specific access level ( … 2 issues )
… Cointed’s Thank-You: 1 ETH
#4 by codingupastorm: Constructor sets owner twice ( 1 issue )
… Cointed’s Thank-You: 0.5 ETH
Further explanations have been posted as comments in the code.
With these changes, the code has now been deployed successfully. The full CTD smart contract can be found here.
The changes are also documented in the latest ChainSecurity public report found above.
The aforementioned Bountyhunters have two options to inform us of their ETH wallet address:
1. Posting their ETH wallet address as a comment in the GitHub thread here
2. Sending their ETH wallet address as a plaintext email to [email protected] and posting the SHA256 hash of the content in the GitHub thread
A big Thank-You again to all participants from the whole Cointed IT department!
----------------------------
Cointed Token Sale Smart Contract is ready for review!
Official GitHub repository including test-scripts and further documentation:
https://github.com/vkonst/ctd-token
A professional audit has already been done by ChainSecurity.com. You may view the results here:
https://github.com/vkonst/ctd-token/blob/master/securityCheck/Cointed_ChainSecurity_Report_Public.pdf
Begin: 12.10.2017, time of this post
End: 19.10.2017, 15:00 CEST
Submissions are only taken via the GitHub issue tracker, in order:
https://github.com/vkonst/ctd-token/issues
Our team will assess each submission individually. After internal approval, a third party (ChainSecurity.com) will weight the issues. Depending on impact and likelihood, the first finder of each unique bug will get the following price:
Low: 1.000 EUR
Medium: 2.500 EUR
High: 5.000 EUR
Critical: 50.000 EUR
The maximum of overall payouts will be 100.000 EUR.
Successful bug hunters may choose the payout amount in ETH, DASH or BTC or any other cryptocurrency tradable at https://www.cointed.com/
Only third parties, who have not been part of contract development in any way may receive bounties.
For any other concerns related to bug bounty, please contact us via [email protected]
Result of the Cointed (CTD) Token Bug Bounty program
Dear Issue reporters,
We want to thank everyone who contributed in the CTD smart contract Bug Bounty program.
Before Cointed published the CTD smart contract for public review, we had already charged the independent Swiss IT security company ChainSecurity with auditing the CTD smart contract. No serious bugs were found during this review. The public audit document of this review can be found here.
For the sake of transparency and impartiality, Cointed also charged ChainSecurity with the task to assess the severity of all issues reported as a result of the CTD Bug Bounty program.
The final result of the review is as follows:
Neither Cointed, nor ChainSecurity were able to find any “bug” in the issues, which have been reported.
Despite the fact that none of the reported issues represented what could be considered a “bug”, we still decided to change the contract’s code based on certain reports, because we care about deploying the most beautiful and clean code possible.
As a Thank-You for their work, we decided to compensate the issue reporters who suggested these changes anyway. The following issues have influenced the latest changes to the smart contract:
#5 by merlox: Overflowing issues and related ( … 3 issues )
… Cointed’s Thank-You: 2 ETH
#2 & #3 by pauliax: function Approve in StandardToken.sol & Mark functions with a specific access level ( … 2 issues )
… Cointed’s Thank-You: 1 ETH
#4 by codingupastorm: Constructor sets owner twice ( 1 issue )
… Cointed’s Thank-You: 0.5 ETH
Further explanations have been posted as comments in the code.
With these changes, the code has now been deployed successfully. The full CTD smart contract can be found here.
The changes are also documented in the latest ChainSecurity public report found above.
The aforementioned Bountyhunters have two options to inform us of their ETH wallet address:
1. Posting their ETH wallet address as a comment in the GitHub thread here
2. Sending their ETH wallet address as a plaintext email to [email protected] and posting the SHA256 hash of the content in the GitHub thread
A big Thank-You again to all participants from the whole Cointed IT department!
----------------------------
Cointed Token Sale Smart Contract is ready for review!
Official GitHub repository including test-scripts and further documentation:
https://github.com/vkonst/ctd-token
A professional audit has already been done by ChainSecurity.com. You may view the results here:
https://github.com/vkonst/ctd-token/blob/master/securityCheck/Cointed_ChainSecurity_Report_Public.pdf
Begin: 12.10.2017, time of this post
End: 19.10.2017, 15:00 CEST
Submissions are only taken via the GitHub issue tracker, in order:
https://github.com/vkonst/ctd-token/issues
Our team will assess each submission individually. After internal approval, a third party (ChainSecurity.com) will weight the issues. Depending on impact and likelihood, the first finder of each unique bug will get the following price:
Low: 1.000 EUR
Medium: 2.500 EUR
High: 5.000 EUR
Critical: 50.000 EUR
The maximum of overall payouts will be 100.000 EUR.
Successful bug hunters may choose the payout amount in ETH, DASH or BTC or any other cryptocurrency tradable at https://www.cointed.com/
Only third parties, who have not been part of contract development in any way may receive bounties.
For any other concerns related to bug bounty, please contact us via [email protected]
Jump to: