Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

7 Rules for Top-notch Web3 Bug Bounty Programs

bugcrowd.com | research | #bug-bounty | #web3 | #cryptocurrency | #bugcrowd | #crowdsourced-security | #responsible-disclosure | #blockchain | #reward-design | #program-design | #vulnerability-rewards

Summary

Bugcrowd shares seven rules for strong Web3 bug bounty programs: impact-based rewards sized for expert researchers (Aurora paid $6M for one inflation bug) plus an open scope across the organization.
Published
Collected

original ↗

Related coverage

  1. Blockport launches initiative to increase awareness around cyber-security within the crypto industry (bugcrowd.com)
  2. State divergence enables unauthorized access (blog.trailofbits.com)
  3. ‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting (yeswehack.com)
  4. ‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty (yeswehack.com)
  5. HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a CTF Security Challenge for the Blockchain Industry (hackenproof.com)
  6. HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a Course for the Blockchain Industry (hackenproof.com)

back