Turingbitchain
Bounty Range
$300 - $1,000
external program
Turingbitchain
Turingbitchain is the creator of the Bitcoin Virtual Machine (BVM) and has implemented a scalable BTC Layer2 solution.
Turingbitchain is the creator of the Bitcoin Virtual Machine (BVM) and has implemented a scalable BTC Layer2 solution.
Rewards will be provided based on the rules of this bug bounty program. At the discretion of Turingbitchain, the quality, creativity, or novelty of the submission may influence the reward amount within a given range.
If multiple reports are submitted for the same issue, only the earliest valid submission will be rewarded.
Vulnerabilities will be assessed based on the CVSS 3.1 standard.
Private keys are encrypted and stored using passwords or biometric authentication. When a user initiates a transaction, the private key is unlocked.
Evaluate whether the private key can be stolen during the transaction process. The focus is on vulnerabilities that could lead to direct private key leakage, causing immediate or potential loss of user assets.
| Severity | Description | Reward |
|---|---|---|
| Critical | Vulnerabilities that directly lead to private key leakage, exploitable without additional conditions, and may cause immediate and irreversible asset loss. | 800 ~ 1,000 USDC |
| High | Vulnerabilities that enable private key theft under certain conditions (e.g., user interaction or environment), potentially causing significant loss, but requiring more effort. | 500 ~ 800 USDC |
| Medium | Vulnerabilities that increase the risk of private key theft in complex scenarios (e.g., chained attacks), but are difficult to exploit directly. | 300 ~ 500 USDC |
Reports must be reproducible and verifiable by the Turingbitchain security team and demonstrate a clear security impact.
Include detailed reproduction steps, such as screenshots, videos, scripts, etc.
Do not:
During testing: