Bug Bounty

Make Lixir safer and get rewarded for it

Welcome to Lixir’s Bug Bounty Program. Our aim is to be the best, which is not possible without support from our community. Submit a bug here and earn a reward. The following are the conditions and rewards.

Scope

Potential problems which can precipitate substantial loss of money, critical bugs like deadlock and starvation, or permanent loss of funds.

Disclosure Policy

Inform us as soon as possible of a potential vulnerability. Allow us a reasonable amount of time to fix the issue before disclosing to the public or a third-party.

Eligibility

In order to be eligible, you must

1. be the first reporter of the vulnerability,

2. be able to verify a signature from the same address,

3. and provide enough information about the vulnerability.

Exclusions

Previously known vulnerabilities and vulnerabilities in front-end code not leading to smart contract vulnerabilities.

While testing for vulnerabilities, please take care not to: denial of service, spam, or phish the Lixir team.

Judgement

The Lixir team is the sole and final arbiter to determine eligibility, exclusion, and reward. Rewards are decided on a case-by-case basis. Our reward scheme follows an approach similar to the Ethereum Bug Bounty.

Reward

Likelihood/Severity	Low	Moderate	Highly
Low	Retweet	500$ in $LIX	1000$ in $LIX
Moderate	500$ in $LIX	2000$ in $LIX	4500$ in $LIX
Highly	1500$ in $LIX	10,000$ in $LIX	up to 200k $ in $LIX

Submit a bug

For now join our Discord or Telegram and DM a CM or team member, or submit an e-mail to [e-mail]