<GeoCash MainNet transition >

<GeoCash 3.0 Bug Bounty>

Policy

GeoCash offers to share your anonymous data in return for GEO tokens. With the mainnet launch, GeoCash 3.0 will live shortly with a few of our other network apps.

Program Rules

  • Please provide detailed reports with reproducible steps demonstrating a plausible remote exploitation scenario. If the report is not detailed enough to reproduce the issue, the issue will not be eligible for a reward.
  • Submit one vulnerability per the report unless you need to chain vulnerabilities to provide impact.
  • When duplicates occur, we only award the first report received (provided that it can be fully reproduced).
  • Multiple vulnerabilities caused by one underlying issue will be awarded one bounty.
  • Social engineering (e.g., phishing, vishing, smishing) is prohibited.
  • Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our service. Only interact with accounts you own or with the explicit permission of the account holder.
  • As project maintainers, we at GeoDB hold the final decision on which issues constitute security vulnerabilities. We hope for your understanding and respect for this.
  • Any images, screenshots, files, and videos produced for illustrating a vulnerability PoC must be submitted in the report and not be posted on any public channels, e.g., Telegram, Youtube video, etc.

Disclosure Policy

  • Although this is a public program and limited to around 30 first testers on invitation only, please do not discuss or disclose any vulnerability (even resolved ones) outside this program without express consent from GeoDB.
  • Any finding should be made available to GeoDB immediately and will remain non-public until the GeoDBTeam has sufficient time to publish an update to solve the issue.

Getting Started

Features and Updates

Areas of Interest

  • Logic errors.
  • Congestion and scalability.
  • Prevention of false mining
  • Missing access controls

Rewards.

Reporting a Vulnerability

Safe Harbour

Good Luck to All Participants

--

--

--

Truly decentralized tools for web 3.0! Dataverse is an effort to give back the power of control to you and help you earn rewards from the data you generate.

Love podcasts or audiobooks? Learn on the go with our new app.

Recommended from Medium

Automated, product-specific NVD vulnerability → work ticket pipeline

Started in June 2020, Unicrypt provides an ever-growing suite of decentralized services.

Open source alone won’t protect your data.

Cross-Site Request Forgery

From politics to pornography, deep fakes are warping reality and ruining people’s lives

How copyright filters lead to wage-theft

Joseph Karl Stieler’s iconic 1820 portrait of Beethoven; Beethoven’s mouth has been covered with a ‘sad Youtube’ icon.

SRI leads collaborative effort that uncovered cybersecurity issues in industrial control system…

Abusing autoresponders and email bounces

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Dataverse

Dataverse

Truly decentralized tools for web 3.0! Dataverse is an effort to give back the power of control to you and help you earn rewards from the data you generate.

More from Medium

How and where to Buy Snowman DAO ($SNOWMAN) — An Easy Step by Step Guide

Surprise Rewards to Retain Online Casino Players

Behold! TT Farm’s Staking Barn is Here!

The Sync X Colors Launch Party