[BUG BOUNTY][ICO] Cointed Token Audit (100k € reward!)

[cointed_official]

EDIT 1:

Result of the Cointed (CTD) Token Bug Bounty program

Dear Issue reporters,
   
We want to thank everyone who contributed in the CTD smart contract Bug Bounty program.
Before Cointed published the CTD smart contract for public review, we had already charged the independent Swiss IT security company ChainSecurity with auditing the CTD smart contract. No serious bugs were found during this review. The public audit document of this review can be found here.
For the sake of transparency and impartiality, Cointed also charged ChainSecurity with the task to assess the severity of all issues reported as a result of the CTD Bug Bounty program.

The final result of the review is as follows:
Neither Cointed, nor ChainSecurity were able to find any “bug” in the issues, which have been reported.
Despite the fact that none of the reported issues represented what could be considered a “bug”, we still decided to change the contract’s code based on certain reports, because we care about deploying the most beautiful and clean code possible.
As a Thank-You for their work, we decided to compensate the issue reporters who suggested these changes anyway. The following issues have influenced the latest changes to the smart contract:

#5 by merlox: Overflowing issues and related ( … 3 issues )
… Cointed’s Thank-You: 2 ETH

#2 & #3 by pauliax: function Approve in StandardToken.sol & Mark functions with a specific access level ( … 2 issues )
… Cointed’s Thank-You: 1 ETH

#4 by codingupastorm: Constructor sets owner twice ( 1 issue )
… Cointed’s Thank-You: 0.5 ETH

Further explanations have been posted as comments in the code.
With these changes, the code has now been deployed successfully. The full CTD smart contract can be found here.
The changes are also documented in the latest ChainSecurity public report found above.

The aforementioned Bountyhunters have two options to inform us of their ETH wallet address:
1.   Posting their ETH wallet address as a comment in the GitHub thread here
2.   Sending their ETH wallet address as a plaintext email to bugbounty@cointed.com and posting the SHA256 hash of the content in the GitHub thread

A big Thank-You again to all participants from the whole Cointed IT department!

----------------------------

Cointed Token Sale Smart Contract is ready for review!

Official GitHub repository including test-scripts and further documentation:
https://github.com/vkonst/ctd-token

A professional audit has already been done by ChainSecurity.com. You may view the results here:
https://github.com/vkonst/ctd-token/blob/master/securityCheck/Cointed_ChainSecurity_Report_Public.pdf

Begin:   12.10.2017, time of this post
End:   19.10.2017, 15:00 CEST

Submissions are only taken via the GitHub issue tracker, in order:
https://github.com/vkonst/ctd-token/issues

Our team will assess each submission individually. After internal approval, a third party (ChainSecurity.com) will weight the issues. Depending on impact and likelihood, the first finder of each unique bug will get the following price:

Low:      1.000 EUR
Medium:    2.500 EUR
High:      5.000 EUR
Critical:   50.000 EUR
The maximum of overall payouts will be 100.000 EUR.
Successful bug hunters may choose the payout amount in ETH, DASH or BTC or any other cryptocurrency tradable at https://www.cointed.com/

Only third parties, who have not been part of contract development in any way may receive bounties.

For any other concerns related to bug bounty, please contact us via bugbounty@cointed.at

[cointed_official]

Hey,

not at this point, stay tuned, will come soon

[luckybit1]

Anyother bounty ...classic project.

[BlueChipper]

Hmm, I am really looking forward to this project to meet Charli and Daniil on the #ICO street.

[cointed_official]

We are also looking forward to this, we will announce details in the coming days.

[BlueChipper]

I saw that you are offering ATM services for BTC. Do you know that this needs a license in Germany and other countries for example? Hence, the German Financial Market Authority (BaFin) will not let you raise funds from German investors. The same is true for some other EEA countries and U.S.

How do you plan to offer your coins/tokens in these countries? Are you doing a White Listing for countries?

[cointed_official]

I saw that you are offering ATM services for BTC. Do you know that this needs a license in Germany and other countries for example? Hence, the German Financial Market Authority (BaFin) will not let you raise funds from German investors. The same is true for some other EEA countries and U.S.

How do you plan to offer your coins/tokens in these countries? Are you doing a White Listing for countries?

Cointed is aware that for the  installation of  BTC ATM's in Germany a Financial services license is necessary. Cointed is already in contact with the BaFin. Cointed Ltd is a company based in Hong Kong. Participation of US, China and Hong Kong based ICO particpants is not allowed. I will post more details and links to the website once we announce, please wait a bit longer

[Zeroxal]

Please be very cautious when investing in cointed. They have been manipulating their fees: https://bitcointalk.org/index.php?topic=1351953.msg17429694#msg17429694
After that post they disappeared from the forum.

Also, they are lying about the original owners and founders of the company. On archive.org you can see several snapshots of the site, which proves that Matthias Rhinow was co-founder  along with Christopher Rieder. http://web.archive.org/web/20160519043109/http://cointed.com:80/


In addition, I have also posted on their Facebook site with suspicions about buying likes and followers on Facebook. The comments got deleted and the "review function" disabled.

I don't think a company that once advertised themselves as the "most trusted trader of Europe" should tell any lies and should come up and explain.

[amiraja2]

good project will see next

[MrBitco.in]

WARNING: Before investing read this:

https://www.generalbytes.com/cointed/

An open letter from one of Cointed's largest suppliers... Numbers not adding up, not having their own ATM or Point of Sale and instead just rip the label of GENERAL BYTES products and present it as their own... INVESTORS WILL BE DUPED into buying into an empty shell, a company in Hong Kong.... All business GENERAL BYTES has ever done is via the Austrian GMBH. The Hong Kong LTD has zero ATMs.... Investors are hold a bait and switch, making them think they invest in the ATMs but instead they sent their money to an empty shell...

DO NOT INVEST IN THE COINTED ICO... YOU ARE BEING SCAMMED!

[Jacob_Goldberd]

□□□□□□ □□□□□□□ □□□□□□.

[Aegis Platform]

Hi. You might be interested in the upcoming Aegis Platform. We are building a site that allows smart contract authors to perform reasonably priced smart contract triple audits (expert audits, automated audits and bug bounty audits). Check us out at www.aegissmartcontracts.com, whether you are a smart contract author or a bounty collector.