gaspersic/solana
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Update security bounty levels (#20471)

Browse Source 
Co-authored-by: publish-docs.sh <maintainers@solana.com>
This commit is contained in:
Dan Albert
2021-10-06 13:57:52 -06:00
committed by GitHub
parent 7027d56064
commit a98aefa14e
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
SECURITY.md
View File

@ -18,24 +18,24 @@ Expect a response as fast as possible, within one business day at the latest.
We offer bounties for critical security issues. Please see below for more details. We offer bounties for critical security issues. Please see below for more details.
Loss of Funds: Loss of Funds:
$500,000 USD in locked SOL tokens (locked for 12 months) $2,000,000 USD in locked SOL tokens (locked for 12 months)
* Theft of funds without users signature from any account * Theft of funds without users signature from any account
* Theft of funds without users interaction in system, token, stake, vote programs * Theft of funds without users interaction in system, token, stake, vote programs
* Theft of funds that requires users signature - creating a vote program that drains the delegated stakes. * Theft of funds that requires users signature - creating a vote program that drains the delegated stakes.
Consensus/Safety Violations: Consensus/Safety Violations:
$250,000 USD in locked SOL tokens (locked for 12 months) $1,000,000 USD in locked SOL tokens (locked for 12 months)
* Consensus safety violation * Consensus safety violation
* Tricking a validator to accept an optimistic confirmation or rooted slot without a double vote, etc.. * Tricking a validator to accept an optimistic confirmation or rooted slot without a double vote, etc..
Other Attacks: Other Attacks:
$100,000 USD in locked SOL tokens (locked for 12 months) $400,000 USD in locked SOL tokens (locked for 12 months)
* Protocol liveness attacks, * Protocol liveness attacks,
* Eclipse attacks, * Eclipse attacks,
* Remote attacks that partition the network, * Remote attacks that partition the network,
DoS Attacks: DoS Attacks:
$25,000 USD in locked SOL tokens (locked for 12 months) $100,000 USD in locked SOL tokens (locked for 12 months)
* Remote resource exaustion via Non-RPC protocols * Remote resource exaustion via Non-RPC protocols
RPC DoS/Crashes: RPC DoS/Crashes: