Bug Bounty
Bounty Program Guidelines:
Submission Criteria:
Submissions must include detailed information about the vulnerability and steps to reproduce it.
The submission should be clear, well-documented, and reproducible.
Eligibility:
Anyone can participate in the bug bounty program.
Employees or contractors directly involved with the smart contract platform are ineligible.
Multiple Submissions:
Participants can submit multiple vulnerabilities but only receive rewards for unique and previously undisclosed issues.
Decision and Reward:
Bounty amounts are determined based on the severity and impact of the reported vulnerabilities.
The platform's security team will assess and validate submissions to determine the severity level and corresponding bounty.
Disclosure and Fixes:
After successful validation, participants are required to allow a reasonable time for fixes before disclosure.
Public disclosure of the vulnerability should be coordinated with the platform's security team.
Legal and Compliance:
Participants must comply with all applicable laws and regulations.
The platform reserves the right to disqualify individuals for any malicious or illegal activities.
Bounty Payment:
Bounty rewards will be distributed as agreed upon between the participant and the platform.
[CHECK] Severity Levels:
Low Severity:
Description: Minor issues that don't significantly impact functionality or security.
Bounty Amount: $50
Medium Severity:
Description: Moderate issues that could potentially impact certain functionalities or pose a moderate security risk.
Bounty Amount: $100
High Severity:
Description: Critical issues that significantly impact security or can exploit the smart contract platform's core functionalities.
Bounty Amount: $250
Critical Severity:
Description: Severe vulnerabilities that pose a substantial threat to the entire platform's security and functionality.
Bounty Amount: $500
Last updated