|
| 1 | +# Bug bounty program of the LibreBank project (including LibreCash) |
| 2 | + |
| 3 | +**LibreBank** is a decentralized autonomous organization (DAO) and a reserve fund dedicated to maintain operation of LibreCash - a stable value cryptocurrency. |
| 4 | + |
| 5 | + |
| 6 | +We do everything to ensure security and privacy of our users and our aim is to create the best product in the segment. That’s why we are launching the bug bounty program. |
| 7 | + |
| 8 | + |
| 9 | + |
| 10 | +## The following contracts are part of the program: |
| 11 | + |
| 12 | + |
| 13 | + |
| 14 | + |
| 15 | + |
| 16 | +- LBRS (ERC20 Token): |
| 17 | +[https://github.com/LibreCash/contracts/blob/master/contracts/token/LibertyToken.sol](https://github.com/LibreCash/contracts/blob/master/contracts/token/LibertyToken.sol) |
| 18 | + |
| 19 | +- LibreCash (ERC20 Token): [https://github.com/LibreCash/contracts/blob/master/contracts/token/LibreCash.sol](https://github.com/LibreCash/contracts/blob/master/contracts/token/LibreCash.sol) |
| 20 | + |
| 21 | +- Autonomous exchange contract (ComplexExchanger): |
| 22 | +[https://github.com/LibreCash/contracts/blob/master/contracts/ComplexExchanger.sol](https://github.com/LibreCash/contracts/blob/master/contracts/ComplexExchanger.sol) |
| 23 | +- Autonomous emission contract (ComplexBank): |
| 24 | +[https://github.com/LibreCash/contracts/blob/dev/contracts/ComplexExchanger.sol](https://github.com/LibreCash/contracts/blob/dev/contracts/ComplexExchanger.sol) |
| 25 | + |
| 26 | +## Bug bounty program terms and conditions |
| 27 | + |
| 28 | +The bounty will follow the standard Ethereum Foundation bug bounty severity classifications. |
| 29 | + |
| 30 | + |
| 31 | + |
| 32 | +We will accept only unique and new bugs. However, we’re trying to encourage all our security researchers who contribute to the project. We’ll be happy to hear your suggestions, wishes, and recommendations as well that will also be accounted and paid individually depending on their severity and value. |
| 33 | + |
| 34 | +Severity of a bug will be evaluated by the dev team and the community. |
| 35 | + |
| 36 | +### Depending on the severity of the problem there are following options of rewards: |
| 37 | + |
| 38 | +1. **Remark or a minor issue:** from 50 to 150 LibreCash (Libre) |
| 39 | + |
| 40 | +2. **Significant bug that affects core functionality**: from 150 to 750 LibreCash (Libre) |
| 41 | + |
| 42 | +3. **Critical error**: from 500 to 1500 LibreCash (Libre) |
| 43 | + |
| 44 | +In certain cases reward can be increased at the discretion of the project team. |
| 45 | + |
| 46 | + |
| 47 | + |
| 48 | +## Bug report format |
| 49 | +To take part in our bug bounty program email your bug report to [bounty@librebank.com](mailto:bounty@librebank.com). |
| 50 | + |
| 51 | + |
| 52 | +**The report has to contain the following information:** |
| 53 | + |
| 54 | +1. Your name or nickname |
| 55 | +2. Contract title, analyzed file version (commit hash) |
| 56 | +3. Short description of the bug including line number and fragment containing the bug (when applicable), |
| 57 | +4. Your personal severity estimation |
| 58 | +5. Use case or other demonstration of the problem |
| 59 | +6. Your Ethereum wallet |
| 60 | +7. Additional contact info |
| 61 | + |
| 62 | +Taking part in the bug bounty program you agree to not publishing any information on the bug found before it is fixed and disclosure is approved by the dev team. Thus you’ll prevent excessive duplication and promote the project’s growth. |
0 commit comments