# Bug Bounties

Scope: Issues which can lead to substantial loss of money, critical bugs like a broken live-ness condition or irreversible loss of funds.

* Let us know as soon as possible upon discovery of a potential security issue.
* Provide us a reasonable amount of time to resolve the issue before any disclosure **to the public or a third-party.**

Exclusions:

* Already known vulnerabilities.
* Vulnerabilities in front-end code not leading to smart contract vulnerabilities.

Eligibility:

* You must be the first reporter of the vulnerability
* You must be able to verify a signature from same address
* Provide enough information about the vulnerability

Bounty rewards:

<table><thead><tr><th>Likelihood</th><th width="191.33333333333331">Low Severity</th><th>Medium Severity</th><th>High Severity</th></tr></thead><tbody><tr><td>Almost Certain</td><td>$10,000.00</td><td>$50,000.00</td><td>$250,000.00</td></tr><tr><td>Possible</td><td>$1,000.00</td><td>$10,000.00</td><td>$50,000.00</td></tr><tr><td>Unlikely</td><td>$1,000.00</td><td>$1,000.00</td><td>$10,000.00</td></tr></tbody></table>

Contact: @wicketwarrick and/or @r2d2\_cnc on Telegram.&#x20;
