TomoX Testnet Bounty Program

Status: Closed

Our TomoX Testnet Bounty Program is an experimental and discretionary program that allows us to encourage and reward members of the TomoChain community for helping us find and address significant bugs in accordance with the rules set out below.

Any questions for bug report program, feel free to create an issue.

For the security issue, you can report it to our bug bounty program on WhiteHub platform: https://whitehub.net/programs/tomochain

Rewards

Your mission: Report bugs.

The bonus is based on the technical severity of the reported vulnerabilities, ranging from 50 TOMO to 1000 TOMO

Our rewards are based on severity per CVSS (the Common Vulnerability Scoring Standard).

Time estimation:

Review and Discussion: We will respond in 3 working days. The actual length of time from Response to Eligible Bug Confirmation depends on the complexity of the issue.

Issue Resolution: 10 working days

Bounty Rewarded: On the first working day of the following month

Guidelines

A bug or new feature report must follow the process to be considered for reward:

• Create an issue on TomoChain Github Bug Reports Repository: https://github.com/tomochain/bug-reports. Please include your TomoWallet address in the report.
• You should report the issue in as detailed as possible with reproducible steps (Please attach all supporting files (e.g. video, screenshots, configuration files, data files, output files, etc.). If the report is not detailed enough to reproduce the issue, the finder will not be eligible for rewards.
• If you propose a new feature, please explain why we need that feature and how it makes our products better.
• A proposal(s) to address or fix the issue is highly recommended. This could be a design proposal or include actual fix(es) to software code.
• Issues already submitted by another user or already known to the TomoChain team are not eligible for bounty rewards.
• Kindly note that any issue found and made public in any way forfeits the finder's right to the bounty.
• Multiple bugs caused by one underlying issue will be awarded one bounty.
• Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our service. Only interact with accounts you own or with the explicit permission of the account holder.

Scope

TomoDEX:

• Site: https://dex.testnet.tomochain.com
• Source code: https://github.com/tomochain/tomox-sdk and https://github.com/tomochain/tomox-sdk-ui

TomoRelayer:

• Site: https://relayer.testnet.tomochain.com
• Source code: https://github.com/tomochain/tomorelayer

TomoX:

• Source code: https://github.com/tomochain/tomochain

Out of scope

• TomoDEX, TomoRelayer on Mobile browser.
• Translation

Testing Guidance

Please read our Medium blog post to have a quick understanding of the TomoX products: https://medium.com/tomochain/say-hello-to-tomox-public-testnet-and-launch-your-own-permissionless-dex-in-minutes-6d735ce557ba

The TomoX Testnet now is available, you can see the products by following the links below:

• TomoChain network stats: https://stats.testnet.tomochain.com
• TomoDex (a DEX’s based on TomoX protocol): https://dex.testnet.tomochain.com
• TomoRelayer (TomoX Governance DApp): https://relayer.testnet.tomochain.com

TomoX:

Follow this guide to know how to run a TomoX Relayer: https://docs.tomochain.com/masternode/tomox-sdk/

TomoDEX:

Follow this guide to know how to using TomoDEX: https://medium.com/tomochain/trading-with-tomodex-the-first-decentralized-exchange-on-tomox-3ec5b377023d

TomoRelayer:

Follow this guide to know to use TomoRelayer: https://medium.com/tomochain/launch-your-own-dex-with-tomorelayer-eb440a2d6a3d

Terms and Conditions:

TomoChain reserves the right to cancel or amend the Program and the Program rules at its own discretion.

Each participant is responsible for monitoring his/her Github account for notification or other communications related to this Program.

If a potential reward winner cannot be reached by TomoChain within ten (10) working days, that potential reward winner shall forfeit the prize. Rewards are made at the sole discretion of the TomoChain.

TomoChain’s core development team, employees and all other people paid by the TomoChain project, directly or indirectly, are not eligible for rewards.

For further technical information, please join our channels:

TomoX telegram Channel: https://t.me/TomoX