CrowdProof
Bug BountyActiveBounty USD $100 - $25,000
Rules & Testing
Excluded Methods
DosSocial EngineeringPhishingPhysical Access
Scope (6 targets)
- DIDRegistry, ReputationOracle, CredentialVerifier, PaymentEscrow, GovernanceToken Smart contracts
- crowdproof-api.azurewebsites.net Backend API
- portal.crowdproof.id portal
- crowdproof.id web
- TypeScript, Python, Go, C#, Java, Swift SDKs
- ReputationProof, AgeProof, KYCProof ZK circuits
Out of Scope
Social engineering or phishing attacks, Denial of service (DoS/DDoS) attacks, Vulnerabilities in third-party services (Stripe, Persona, Azure), Issues requiring physical access to hardware, Known issues already listed in our GitHub issue tracker
Recognition
- Hall of Fame
- https://crowdproof.id/security#acknowledgments