
Bullion Exchanges
External Program
Submit bugs directly to this organization


External Program
Submit bugs directly to this organization
No technology is perfect, and Bullion Exchanges believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. If you believe you've found a security issue in our product or service, we encourage you to notify us. We welcome working with you to resolve the issue promptly.
To show our appreciation of responsible security researchers, Bullion Exchanges offers a monetary bounty for reports of qualifying security vulnerabilities. Reward amounts will vary based upon the severity of the reported vulnerability, and eligibility is at our sole discretion.
While researching, we'd like to ask you to refrain from:
#Qualifying Vulnerabilities
Any design or implementation issue that is reproducible and substantially affects the security of Bullion Exchanges users is likely to be in scope for the program. Common examples include:
#Non-Qualifying Vulnerabilities
Depending on their impact, not all reported issues may qualify for a monetary reward. However all reports are reviewed on a case-by-case basis and any report that results in a change being made will at a minimum receive recognition.
Please refrain from accessing private information, performing actions that may negatively affect Bullion Exchanges users (spam, denial of service), or sending reports from automated tools without verifying them.
The following issues are outside the scope of our vulnerability rewards program (either ineligible or false positives):