Click to expand!
At Convex Labs, we’re NFT fanatics. We believe that NFTs represent a revolution in the art and collectibles spaces. Unfortunately, as described in Paradigm's Guide to Designing Effective NFT Launches, the current systems being used for NFT launches are often unfair to average users. Hasu and Agnihotri describe several pitfalls which can give sophisticated users an edge and allow such users to extract value from both creators and other collectors.
We have developed and deployed tools for the purpose of gaining an advantage when buying NFTs and we aren’t the only ones; we’ve been observing people using such tools for months and recently numerous paid services such as traitsniper.com have appeared. We’ve open sourced our tools, describing how we use them, and how to detect when someone else has used similar methods to gain an advantage in an NFT launch.
Continue reading about our motivation / background here.
Our bug bounty program is an experimental and discretionary rewards program modeled after the Ethereum bug bounty program. We will give NFTs, Ether, or other prizes to participants who improve our codebase or find dishonest drops.
We are seeding our initial bug bounty pool with 100% of the profits we made trading NFTs with our code. We encourage others to donate to our bounty pool multisig.
Our Gnosis Safe Multisig: 0xa94a1B82B441DAA23890FF5eEb84a66D323Fd6c1
Read more about our rewards program here.
1. Prerequisites
- python
- git
2. Instructions
- Download the github repo:
git clone https://github.com/Convex-Labs/honestnft-shenanigans.git - Change directory to the downloaded repo:
cd honestnft-shenanigans - Install the tools and requirements with:
pip install --editable . - Rename
.env-exampleto.env - Add your personal API keys and web3 providers to
.env
Note: The repo takes a few minutes to install. We've provided a decent amount of test data so the repository is rather large.
- Download metadata with pulling.py
- Generate rarity rank with rarity.py (ranks are based off rarity.tools algorithm - we reverse engineered it)
- Generate rarity map (scatterplot) with rarity_map.ipynb
- Pull minting data with find_minting_data.ipynb
- Generate ks-test scores with ks_test.ipynb (ignore ks-test results for drops with skewed rarity maps)
- Tell us what you find!
Tutorial: https://vimeo.com/638878051
Web3 Provider: https://www.alchemy.com/ (Recommended)
Basic IPFS Endpoints: https://ipfs.github.io/public-gateway-checker/
Note
When you click one the gateways, you might be redirected to a long URL. Please note that only the hostname + /ipfs/ part is necessary.
E.g.
Correct: gateway.ipfs.io/ipfs/
Wrong: gateway.ipfs.io/ipfs/bafybeifx7yeb55armcsxwwitkymga5xf53dxiarykms3ygqic223w5sk3m#x-ipfs-companion-no-redirect
A Guide to Effectively Cheating NFT Launches (and detecting cheaters)
- Spikes in minting before rare tokens
- Median rarity in sliding windows of length N
- Unusually high amounts of "1 mint" buyers getting rare tokens (ie minting one token and getting one rare; ks-test isn’t super sensitive to this)
- Rare items getting listed at the same time. It is very interesting if multiple addresses list super rare items at the same time. Maybe these addresses all belong to one person?
For help, visit the 🔨#support channel in our Discord.
Contributions, issues, feature requests or even suggestions are welcome! You can open an issue/PR or join us on Discord to discuss your contribution. You can even earn a nice bounty.
Don't forget to check out our contributing guide.
The Etherscan team for providing the free API keys for: