smartcontractkit / smartcontractkit/chainlink

Offering a free security review — no strings attached

Open
#22,802 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
8.2k
Forks
2k
Avg merge
1d 23h
Merged PRs (30d)
202

Description

Hi @smartcontractkit 👋

I'm Aditya, a security researcher at Aditya Security Labs.

I'd like to offer your project a free, no-obligation security review. Here's what I'll do:

  • Review your authentication, authorization, and API security
  • Check for common high-impact vulnerabilities (IDOR, SSRF, injection, logic flaws)
  • Report all findings to you privately and responsibly — nothing public without your consent
  • Provide a short written summary of what I find (even if it's "all clear")

Why free? I'm building my open-source portfolio and I genuinely want to contribute to the community. I've previously found and reported vulnerabilities in major platforms and would love to help your project too.

No catch. If you're interested, just reply here or email me. If you'd rather I not, no worries — I won't touch the codebase without permission.

Looking forward to hearing from you!

— Aditya
Aditya Security Labs
https://github.com/sivaadityacoder

This offer is made in good faith and in compliance with your SECURITY.md disclosure policy.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reading SECURITY.md, which the message says governs disclosure. The issue names no files, tests, or entry points and does not define a repository change; maintainers would first need to decide whether to authorize the proposed review and define its scope.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
10/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.