Ethereum's First Protocol Attackathon Launches with $1.5M Reward

The Ethereum Foundation has unveiled its inaugural Protocol Attackathon, a significant initiative aimed at bolstering the security of the Ethereum protocol. This event, which runs from November 25, 2024, to January 20, 2025, offers a reward pool of $1.5 million and is hosted in partnership with Immunefi, according to the Ethereum Foundation.

Purpose and Structure of the Attackathon

The Protocol Attackathon is designed as a large-scale crowdsourced security audit competition. It invites participants from across the Ethereum community, including auditing firms and individual security researchers, to engage in identifying vulnerabilities within the Ethereum protocol. The event begins with an educational phase where participants receive comprehensive instruction on the protocol’s code through live technical walkthroughs and educational content provided by the Attackathon Academy.

Security Audit and Evaluation

During the competition, participants are tasked with actively searching for and reporting vulnerabilities in the Ethereum protocol's code. Compliance with specific rules is mandatory, and only impactful reports that adhere to these guidelines will be eligible for rewards. Post-competition, Immunefi will compile and evaluate the findings, publishing a detailed report that highlights discovered vulnerabilities and recognizes top contributors for their expertise.

Opportunities in Public Good Security

The Ethereum Foundation's Protocol Security Research team is also seeking to expand, offering positions for two Security Engineers. This move underscores the Foundation's commitment to enhancing the security of the Ethereum network and supporting the development of public good security initiatives.

The Ethereum Protocol Attackathon represents a pivotal step towards strengthening the blockchain's security framework, leveraging the collective expertise of the global Ethereum community to address potential vulnerabilities.