<username>{{ maskedUsername }}</username><space /><text>just voted for</text><space /><projectLogo /><space /><projectName>{{ projectName }}</projectName>

Bug Bounty rewards are grouped by severity and the impact of the vulnerability. Examples and descriptions of the type of vulnerabilities that correspond to each severity level can be found below. The payout amount has a 5 tier structure with separate scalesfor website/apps and smart contracts.

Description of vulnerability and your proof of concept or validation steps

Short description of the vulnerability and the affected asset.

Vulnerability Title

Insecure `Export Private Key`: testing `Private Key` in use

A webpage can interact with the extension without user approval

Lack of input validation and obtaining data from insecure sources.

Usage of "dangerouslySetInnerHTML"

Sensitive Information Disclosed in Memory

Insecure key derivation function

Application uses v1 signature scheme (Janus Attack)

Screenshot backgrounding

Mnemonic display allow screenshot

Missing HSTS header

Missing Security Headers

Clear text traffic enabled

No root or jailbreak detection on Android/iOS application

ATS Misconfiguration

Using components with known vulnerabilities

Lack of local authentication

Tanglepay

TanglePay 

Leaderboards

Due Diligence Tools

Resources