Submit a bug & get paid

The Defi Pool Bug Bounty Program is focused around our smart contracts and main website app with a primary interest in the prevention of loss of user funds, either by direct draining of locked funds or social engineering attacks by redirecting users or forcing them to sign a transaction.

All payouts are done by the Defi Pool Administration team and are pegged to the USD values. Payable crypto tokens are $DFP or $BUSD.

* All bug reports must include a Proof of Concept demonstrating how the vulnerability can be exploited to be eligible for a reward. This may be a smart contract itself or a transaction.

* XSS reports are restricted to those that have an impact of prompting a user to sign a transaction or a redirect.