CrowdProof
Bug BountyActiveBounty USD $100 - $25,000
Rules & Testing
Excluded Methods
DosSocial EngineeringPhishingPhysical Access
Scope (6 targets)
- DIDRegistry, ReputationOracle, CredentialVerifier, PaymentEscrow, GovernanceToken Smart contracts
- crowdproof-api.azurewebsites.net Backend API
- portal.crowdproof.id portal
- crowdproof.id web
- TypeScript, Python, Go, C#, Java, Swift SDKs
- ReputationProof, AgeProof, KYCProof ZK circuits
Out of Scope
Social engineering or phishing attacks, Denial of service (DoS/DDoS) attacks, Vulnerabilities in third-party services (Stripe, Persona, Azure), Issues requiring physical access to hardware, Known issues already listed in our GitHub issue tracker
Recognition
- Hall of Fame
- https://crowdproof.id/security#acknowledgments
security.txt
- Contact
- mailto:[email protected], https://crowdproof.id/security
- Policy
- https://crowdproof.id/security
- Acknowledgments
- https://crowdproof.id/security#acknowledgments
- Languages
- en
- Expires
- Mar 1, 2027