GTBS Blockchain ↗
Security · Responsible Disclosure

GTBS Bug Bounty Program

Help secure GTBS Blockchain. The published program advertises rewards up to $250,000 for eligible critical vulnerabilities, with responsible disclosure requirements.

GTBS Blockchain

Reward tiers

Severity should reflect realistic impact and exploitability.

CRITICAL

Critical

Up to $250,000 for chain halts, direct fund loss, consensus failure or similarly severe vulnerabilities.

HIGH

High

Up to $50,000 for severe privilege escalation, major denial of service or comparable impact.

MEDIUM

Medium

Up to $10,000 for significant information disclosure or meaningful application security weaknesses.

LOW

Low

Up to $1,500 for lower-impact issues and hardening opportunities.

GTBS Blockchain

Program scope

Security researchers should focus on assets where a vulnerability could materially affect users or the protocol.

IN SCOPE

Core protocol

Consensus, execution, node software and official protocol contracts.

IN SCOPE

Official bridges

Bridge contracts and supporting infrastructure operated by GTBS.

IN SCOPE

Wallet

GTBS Wallet security issues that can affect keys, funds or transaction integrity.

IN SCOPE

Infrastructure

Official public services where the program explicitly permits testing.

GTBS Blockchain

How to report

Responsible disclosure protects users while the issue is investigated and fixed.

01

Do not exploit users

Do not access, alter or exfiltrate real user data or funds beyond the minimum proof needed.

02

Prepare evidence

Include affected component, reproduction steps, impact assessment and relevant logs or code references.

03

Email security

Send the report to support@gtbsblockchain.com with the subject “Security Report”.

04

Coordinate disclosure

Allow the team time to validate, patch and coordinate a responsible disclosure.

GTBS Blockchain

Security events & programs

Use these recurring program formats to encourage continuous research.

ONGOING

Always-on bounty

Continuous responsible disclosure for eligible vulnerabilities.

EVENT

Security Sprint

Focused review periods around major protocol or product releases.

EVENT

Researcher Office Hours

Technical sessions for researchers to understand scope and reporting expectations.