Protocol Security
Bug Bounty Program
Help us secure the Actora Protocol. We reward security researchers for finding vulnerabilities with ecosystem reputation and future governance weight.
Bounty_Table
REWARD_TYPE: XP / FUTURE_ALLOCATIONVESTED_ALLOCATION
CRITICAL_SEVERITY
Significant future governance allocation (vested). For direct theft or insolvency risks.
RETRO_POINTS_++
HIGH_SEVERITY
High priority points toward future ecosystem airdrops. For freezing funds or griefing attacks.
XP_MULTIPLIER_2X
MEDIUM_SEVERITY
Permanent XP multiplier applied to your profile + whitelist spots for partner mints.
GRAVITY_XP
LOW_SEVERITY
Standard XP rewards to increase your ecosystem reputation and leaderboard standing.
ASSETS_IN_SCOPE
TargetTypeImpact Level
ActoraFactory.sol
Smart Contract
Critical / High
GravityEngine.sol
Smart Contract
Critical / High
ActoraRouter.sol
Smart Contract
High
api.actora.xyz
Backend API
Medium / High
sdk-core
NPM Package
Medium
Rules_of_Engagement
- Do not exploit the vulnerability publicly.
- Do not attempt phishing or social engineering.
- Do not exfiltrate user data (PII).
- Provide a reproducible Proof of Concept (PoC).
- Rewards distributed upon Token Generation Event (TGE).
Found a Vulnerability?
Please encrypt your report using our PGP key if it contains sensitive exploit data. We acknowledge receipt within 24 hours.
