Camino Network
Status: Active
Program Operator: Camino Network Foundation
Launch Date: 27 Mar 2024
Expiration: Non-expiring
GENERAL INFORMATION
The L1 blockchain designed for the global travel industry and fueled with CAM token.
Resources:
Asset Type: Blockchain/DLT
Product Type: Technology and Infrastructure
Project Category: L1
PROGRAM RULES
- Respect the scope of the program
- Don't discuss or disclose vulnerability information without prior written consent
ELIGIBILITY CRITERIA
- Current employees, vendors (auditors), partners and contractors are not eligible to participate in the bug bounty program
REWARDS AND RECOGNITION
- Payouts are handled by the team directly and are denominated in USD. However, payouts are done in USDT at the discretion of the team
- The bug bounty program reserves the right to adjust award amounts based on the quality and accuracy of submissions within the specified range
SUBMISSION GUIDELINES
- Reports should be submitted through the Remedy platform
- High/Critical severity bug reports should include a runnable Proof of Concept (PoC) in order to prove impact
VULNERABILITY PAYOUTS
Critical: $15,000 - $20,000
- Network not being able to confirm new transactions (Total network shutdown requiring hard fork)
- Unintended permanent chain split requiring hard fork (Network partition requiring hard fork)
- Direct loss of funds
- Permanent freezing of funds (fix requires hard fork)
High: $5,000 - $15,000
- Transient consensus failures
- Unintended chain split (Network partition)
Medium: $2,500 - $5,000
- DoS and does not shut down the network
Low: $50 - $2,500
Informational: up to $50
IN SCOPE ASSETS
- Protocol: https://github.com/chain4travel/caminogo
- Protocol (VM): https://github.com/chain4travel/caminoethvm
- Protocol (CaminoJS): https://github.com/chain4travel/camino-node
OUT OF SCOPE
- Theoretical vulnerabilities without any proof or demonstration
- Old compiler version
- The compiler version is not locked
- Vulnerabilities in imported contracts
- Code style guide violations
- Redundant code
- Gas optimizations
- Best practice issues
- Known and reported bugs by Avalanche documented in official release notes
