More than 20 independent researchers and artificial intelligence algorithms searched for vulnerabilities in the DOT-Chain Defence weapons marketplace.

This was reported by the Ministry of Defence of Ukraine.

The testing took place during the BugBash intensive held within the Kyiv International Cyber Resilience Forum.

To guarantee the absolute security of defense orders, the Defence Procurement Agency (DOT) engaged the Ukrainian cyber community in the testing.

“The BugBash format allowed us to simulate real cyberattack scenarios in a controlled environment. The key technological highlight of the event was the final testing of the system by AI, which will continue after the end of the two-day hackathon”, — the report notes.

Key points of the inspection:

  1. Data Security: Testing was conducted on an isolated environment without access to real data.

  2. Methodology: Participants earned points for each discovered bug or vulnerability, competing for the title of the most effective hacker.

  3. Result: Minor vulnerabilities were identified and have already been forwarded to the DOT development team for prompt resolution.

The event took place under the auspices of the NSDC and with strong international support from the U.S. Department of State, the Government of Canada, and the CRDF Global foundation. The technological platform for bug hunting was provided by the BugStream service in partnership with Cyber Unit Technologies.

“This approach demonstrates the transition of Ukrainian defense technologies to global standards: instead of closed, bureaucratic inspections — an open audit by the professional community and the use of advanced IT tools”, — the Ministry of Defence noted.