Wiselending

Nervos Network: Program Info

nervos.org

Public Bounty

Submit Reports

SCOPE

Targeted Assets

https://github.com/nervosnetwork/rfcs/blob/master/rfcs/0020-ckb-consensus-protocol/0020-ckb-consensus-protocol.md https://github.com/nervosnetwork/ckb https://github.com/nervosnetwork/ckb-vm https://github.com/nervosnetwork/ckb-system-scripts https://github.com/nervosnetwork/tentacle https://github.com/nervosnetwork/ckb-cli https://github.com/nervosnetwork/neuron

$25,000

Max Payout

Max Resolution Time

30 Business Days

5th June 2024

Start Date

Documentation

docs.nervos.org/

RULES

Focus Area

In Scope

  • Account management flaws which would put end-user accounts at risk.
  • General software security vulnerabilities.
  • Cryptographic primitives.
  • The security and integrity aspects of the protocol implementation.
  • Protocols such as the consensus model, the economics model, the cell model, the p2p protocols, the PoW algorithms.

    • Out of Scope

  • Vulnerabilities that have already been exploited
  • Nervos websites.
  • Theoretical security issues with no realistic exploit scenario(s) or attack surfaces, or issues that would require complex end user interactions to be exploited
  • Issues determined to be low impact

    • Unique T&Cs

  • Rewards are distributed according to the impact of the vulnerability based on this classification system
  • In addition to severity, Nervos Bounty Program considers a number of other variables in determining rewards, including (but not limited to): Quality of description & Quality of reproducibility, such as test code, scripts and detailed instructions.
  • The bounty program will end whenever the initial reserved $1M worth of rewards are all paid out.
  • Rewards may be paid out in USD, USDT, ETH, BTC or, in certain jurisdictions, CKB.
  • To be eligible to receive a reward, you must provide Blockwarden with accurate, complete and up-to-date information about you, including your name, email address, and any other information that Nervos reasonably requests, to allow Nervos to send a reward to you. If you are located within the United States, you may not be eligible to receive tokens as rewards. If you are not eligible to receive tokens as rewards, any and all rewards you receive will be paid in USD, USDT, ETH or BTC only. If you are located outside the United States, you have the option to receive rewards in CKB Tokens. Before you receive a reward, you must sign and return to Nervos any additional agreements or forms as may be required and provided by Nervos, including without limitation, the Notice of Future Token Interest Award if your reward will be paid in CKB tokens. Nervos makes no guarantee of a token’s value in any currencies. You are responsible for paying all taxes related to the rewards payments, if any.

    • REWARDS

    Critical

    $15,001 to $25,000

    High

    $10,001 - $15,000

    Medium

    $2,001 - $10,000

    Low

    $501 to $2,000