Cybersecurity of the company and the security of our users' data is a top priority for us, therefore VeChain launched a bug bounty program to find vulnerabilities and pay rewards.
Target | Type | Severity | Reward
| blockchain | Critical | Bounty
Severity (CVSSv3) | Reward
Critical | 10000$
High | 5000$
Medium | 2500$
Low | 500$
This Bug Bounty ONLY limits to the code.
Do code review for logical and security mistake in our testnet: VeChainThor is a new public blockchain that was written from scratch by the VeChain team. VeChainThor leveraged some of the features of Ethereum such as EVM. The VeChain team has added a lot enterprise friendly features at the core blockchain level so that it could be easily used by any developer or user on the platform. Some of the major features are:
Follow the updates via a special tab in the program, if you have any further questions feel free to ask via online chat on the site.
Thor is VeChain's new generation blockchain project. It's the oﬃcial implementation written in golang.
1) Download mainnet source code, vendor dependency packages and VeChain Thor Tutorial via Github https://github.com/vechain/thor.
2) Connect to the testnet, generate wallet address by yourself and receive test tokens via faucet.
Protocol and Network
- Scenarios for DoS attacks.
- 51% and other X% attacks
- Finney attacks
- Sybil attacks
- Replay attacks
- Elliptic curve (secp256k1, ECDSA,ECDH,ECIES).
- Hash algorithms (Keccak-256,Blake2b).
- Merkle Patricia trees.
To participate in the contest, you must agree and follow the rules described in this policy. You must be the first to report a vulnerability to receive a reward.
You must send a clear textual description of the work done, along with steps to reproduce the vulnerability.
After sending report, you cannot tell anyone or anywhere. Public disclosure of a vulnerability makes it ineligible for a bounty. Also, please do not store screenshots and / or executable codes and scripts related to the vulnerability discovered on publicly available services and resources so that the information is not available to third parties.
|Scope Type||Scope Name|
On this program you get up to 10000.0 HKN for the most critical vulnerability.