Bounties are paid at our discretion after we verify the issue, reproduce it, and ship a fix. Reward is a percentage of current treasury balance (USDC), not a fixed dollar amount.

• Low

  Minor issues with limited impact

  1%
• Medium

  Meaningful risk, no direct fund loss

  2%
• High

  Serious exploit path or integrity break

  3–4%
• Critical

  Imminent or proven loss of funds / keys

  5%

Do not exploit issues on mainnet without written approval. No public disclosure before fix and verification.