Good Vulnerability Starting Points (IN SCOPE)

We are continuously looking to find security issues affecting our blockchain protocol and its implementation. This list is not complete by any means but should provide a good starting point:

Security weaknesses:

• Bugs in our implementation of the cryptographic primitives (eg zerocoin)
• Remote Code Execution
• Theft (unauthorized movement of funds, access to private keys)
• Inflation (creation of coins by any method different from Staking)
• Netsplit (preventing a part of the peer to peer network from communicating with the other part of the network in a way that could be applied generically)
• Attacks on the PIVX zPIV implementation

Denial of Service attacks:

• Create invalid blockchain state
• Overload the whole network
• Overload a single client
• Crash a client
• Stall a client
• Disconnect client
• Create invalid client state

To find these vulnerabilities, you can use both the source code directly, use the dockerized testnet. A dedicated security testnet is planned.

ATTACKING MAINNET TO VERIFY YOUR FINDING IS OK