Skip to content

Replace self-hosted bounty program with Immunefi Bug Bounty in SECURITY.md #2939

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Replace self-hosted bounty program with Immunefi Bug Bounty in SECURITY.md #2939

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 5 additions & 9 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,19 +2,15 @@

## Bug Bounty Program

Pyth operates a self hosted [bug bounty program](https://pyth.network/bounty) to financially incentivize independent researchers (with up to $500,000 USDC) for finding and responsibly disclosing security issues.
Pyth operates a [bug bounty program](https://immunefi.com/bug-bounty/pythnetwork/information/) on Immunefi to financially incentivize independent researchers (with up to $250,000 USDC) for finding and responsibly disclosing security issues.

- **Scopes**
- [Pyth Oracle](https://github.com/pyth-network/pyth-client/tree/main/program)
- [Pyth Crosschain Ethereum](/target_chains/ethereum/contracts/contracts/pyth)
- [Pyth Crosschain Aptos](/target_chains/aptos/contracts)
- [Pyth Crosschain Sui](/target_chains/sui/contracts)
- [Pyth Governance](https://github.com/pyth-network/governance/tree/master/staking/programs/staking)
Please see the [Immunefi scope list](https://immunefi.com/bug-bounty/pythnetwork/scope/#top) for an up-to-date list of the included scopes
- **Rewards**
- Critical: Up to $500,000
- High: Up to $100,000
- Critical: Up to $250,000
- High: Up to $50,000

If you find a security issue in Pyth, please [report the issue](https://yyyf63zqhtu.typeform.com/to/dBV4qcP0) immediately to our security team.
If you find a security issue in Pyth, please report the issue immediately to our security team via a Immunefi submission.

If there is a duplicate report, either the same reporter or different reporters, the first of the two by timestamp will be accepted as the official bug report and will be subject to the specific terms of the submitting program.

Expand Down