Vailox Bug Bounty Program Launch

Help Us Stay Secure

We’re launching our official bug bounty program! Security researchers and white-hat hackers are invited to help us identify vulnerabilities.

Start Date: January 1, 2026 Reward Pool: Up to $50,000 per vulnerability

Reward Tiers

Critical ($10,000 - $50,000)

• Smart contract vulnerabilities allowing fund theft
• Authentication bypasses
• Remote code execution

High ($5,000 - $10,000)

• Significant data exposure
• Privilege escalation
• Logic flaws affecting trades

Medium ($1,000 - $5,000)

• Moderate security issues
• Cross-site scripting (XSS)
• Information disclosure

Low ($100 - $1,000)

• Minor security issues
• Best practice violations
• Documentation improvements

Scope

In Scope:

• Smart contracts on all supported networks
• Web application (app.vailox.com)
• API endpoints
• Authentication systems

Out of Scope:

• Social engineering
• Physical attacks
• Third-party services
• Previously reported issues

How to Participate

1. Review our security policy on GitHub
2. Identify a potential vulnerability
3. Submit a detailed report to security@vailox.com
4. Receive confirmation within 48 hours
5. Coordinate disclosure timeline

Help us build a safer platform for everyone.