DF.Help Bug Bounty Program

Bug Bounty Scope

The following websites are within the scope of the program:

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

General Requirements:

Your report should be sent by email.
Reports on previously published vulnerabilities are not considered.

Testing Requirements:

- The researcher must provide detailed information about the vulnerability, including information needed to replicate and test the vulnerability;
- The researcher must not publish or share the vulnerability information with third parties until it has been corrected;
- Do not use DDos, phishing, automated scripts, or other research methods that could damage the server;

Possible Awards:

Mention in the hall of fame.
If you find a vulnerability by which a potential attacker can access user personal data or manage user funds, a monetary reward will range from 3 ETH to 5 ETH.
The researcher takes full responsibility for paying the tax on the reward.