BlazePhoenix
Bug BountyActiveBounty Full Safe Harbor
BZPX $100,000 - $6,000,000
Program Details
Smart-contract bug bounty across two on-chain protocols, an EVM DEX aggregator and a solvency-enforced staking engine, with 40,000,000 BZPX allocated. Rewards are paid in the project's own token, which is not yet liquid, so the programme commits to a quantity of tokens and a schedule rather than to a value; settlement begins after October 2026, though reports are triaged from now. Severity is assessed by the project, with written reasoning where it differs from the reporter's rating.
- Allows Disclosure
- Yes
- Response SLA
- 3 business days
Rules & Testing
Excluded Methods
DosSocial Engineering
Scope (2 targets)
- Solidity contracts of the DEX aggregator (Router, Solver, Hub, Quoter, Core) other
- Solidity contracts of the staking engine (BlazePhoenixStaking, BlazePhoenixMathLib) other
Out of Scope
Third-party AMM pools, tokens and bridges the protocol reads from, RPC providers and front-ends, Theoretical concerns without demonstrated impact
Legal & Standards
- Legal Terms
- https://github.com/blazephoenixxyz-crypto/Blaze-Phoenix-Dex/blob/main/SECURITY.md
Standards
security.txt
Recognition
- Hall of Fame
- https://blazephoenix.xyz/bounty
Security
- Preferred Languages
- English, Portuguese