
Ripple Old
External Program
Submit bugs directly to this organization
We are offering a bounty for any security-relevant bugs. This includes exploits, vulnerabilities and information about ongoing attacks.
In order to qualify for a bounty, a bug must be
The amount we pay varies dramatically. Vulnerabilities that are harmless on their own, but could form part of a critical exploit will usually receive a bounty. Full-blown exploits can receive much higher bounties.
Please don’t hold back partial vulnerabilities while trying to construct a full-blown exploit. We will pay a large bounty to anyone who reports a complete chain of vulnerabilities even if they have reported each component of the exploit separately and those vulnerabilities have been fixed in the meantime. However, to qualify for a the full bounty, you have to have been the first one to report each of the partial exploits.
To report a qualifying bug, please send a detailed report to: [email protected]