Security Bounties

[asselstine]

We value contributions from the community to strengthen the security of the core contracts. We want to reward any hackers in good faith who report vulnerabilities.

The scope of this bounty includes the PoolTogether smart contracts. The determination of the bug severity will be made by the PoolTogether team.

Payouts will be as follows:

High: $25,000 DAI Medium: $10,000 DAI Low: $1,000 DAI

The issue must:

• be a previously unreported, non-public vulnerability.
• include enough detail for us to identify and reproduce the problem

All reports should start with an email to hello@pooltogether.us and they will receive a response within 24 hours. Non-security issues are not eligible for this bounty.

We determine the severity of an issue according to the Smart Contract Security Alliance Severity Levels

Determinations of eligibility and all terms related to this award are at the sole and final discretion of the PoolTogether team.

[nicorepetti]

Hi, I sent a few mails to hello@pooltogether.us but I didnt get a response. The email is still valid or I must post the bug on another site? Thanks

[asselstine]

Reach out on Discord! Tag me in the #developers channel

https://discord.gg/kv6jT4rh