Members · Bug hunters

Bug hunters

Find a bug, a security hole, or a better way to do something. Send it in with the steps to reproduce it. If we deploy the fix, you earn OWX from the build fund.

How it works

Join as a bug hunter below (one click, signed in).
Send a report: what you did, step by step, what you expected and what happened instead.
Staff check it, set the severity and keep you posted under “My reports”.
When the fix is deployed, the reward is sent to you in OWX.

Reward tiers

Criticalset per report

Lets someone take funds, chips or prizes, or act as another member or an admin.

Highset per report

Exposes private data, gets around a limit that protects money, or breaks a game's fairness.

Mediumset per report

Breaks a feature for many members, or a security weakness that needs unlikely conditions.

Lowset per report

Small bugs, rough edges, and better ways to do something.

The rules

First clear report wins. If two people find the same thing, the reward goes to the first report we can reproduce from its steps.
Test only with your own account. Never look at, change or move anything that belongs to someone else.
No denial-of-service, spam, phishing or social engineering of members or staff.
Report privately, here. Don't post a hole publicly or tell anyone else until we've fixed it.
Staff decide the severity and the reward. The tiers above are a guide, not a promise.
Rewards are paid in OWX to the Internet Identity principal on your account. A person reviews and sends every payout by hand; no software signs the transfer, so it isn't instant.

Loading…