Featured on
Featured on
Attack surface
4 in-scope
bridge.citrea.xyzurl· Criticalcitrea.xyz/batch-explorerurl· Critical— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Citrea Web & Apps.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
first indexed
2h ago · 4 in-scope assets
// only one snapshot on record — changes appear from the next ingest onward
{
"assetTypes": [
"Web",
"apps"
],
"stage1Hash": "0ed4c00e36d7ff44a62476407276137a1f0af9e94e26c44ff7b8a3cf90a18fe2",
"description": "Citrea is the first rollup that enhances the capabilities of Bitcoin blockspace with zero-knowledge technology. Citrea is the only scalability solution that uses Bitcoin both as a data availability and a settlement layer, via its BitVM-based trust-minimized two-way peg program - Clementine. Citrea is fully EVM compatible, enabling all EVM developers to easily build on Bitcoin. For more information about Citrea, please visit https://citrea.xyz.\r\nCitrea provides rewards in USDC on Ethereum, denominated in USD. For more details about the payment process, please view the Rewards by Threat Level section further below.\r\n",
"projectTypes": [
"Bridge",
"Infrastructure"
]
}docs.citrea.xyzexplorer.mainnet.citrea.xyzurl· Criticalblog.citrea.xyzurl· CriticalCache poisoning without malicious injection or redirectionsurl· None