Iron Fish is Seamless, Safe Crypto Iron Fish encrypts every transaction, shielding your sensitive asset information from public view. With read-only view keys, you remain compliant and in control.

Test Plan

• Download the source at https://github.com/iron-fish/ironfish
• Follow the instructions to get it set up here, https://github.com/iron-fish/ironfish/blob/master/README.md

Out of scope vulnerabilities

Anything that is not included in the scope doc is out of scope, https://hackerone.com/iron_fish_bbp/policy_scopes

Program Rules

Please provide detailed reports with reproducible steps. If the report is not detailed enough to reproduce the issue, the issue will not be eligible for a reward.

• Submit one vulnerability per report, unless you need to chain vulnerabilities to provide impact.
• When duplicates occur, we only award the first report that was received (provided that it can be fully reproduced).
• Multiple vulnerabilities caused by one underlying issue will be awarded one bounty.
• Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our service.

Response Targets

Iron Fish will make a best effort to meet the following SLAs for hackers participating in our program:

Disclosure Policy

• As this is a private program, please do not discuss this program or any vulnerabilities (even resolved ones) outside of the program without express consent from the organization.
• Follow HackerOne's disclosure guidelines.