All bugs and vulnerabilities should be reported to pipermerriam@gmail.com or to pipermerriam on gitter chat.

Any security related issues will be eligible for a bounty ranging from 10-100 ether depending on the severity of the exploit. The bounty is subject to the following restrictions.

  • Only issues with the source code of the most recent publicly deployed contract is eligible for the bounty.
  • Only the first person to report an issue will be paid.
  • Only issues that are privately disclosed in a manner that allows the issue to be fixed prior to public disclosure are eligible.

Happy Hunting!