Bug Bounty
Security is our top priority. The SuperTest cryptocurrency exchange cares about the security of each user. Therefore, we encourage finding vulnerabilities on the exchange and pay rewards for their discovery.
To be eligible to receive a reward for finding a vulnerability, you need to:
Inform us about the vulnerability
Do not disclose information about it and give us sufficient time to fix the vulnerability
Make the necessary efforts
To avoid damage to the exchange and its users.
Do not mislead
Users and/or exchange employees during the search and elimination of the vulnerability.
Reward
We do not limit the maximum amount of rewards and can increase the reward depending on the severity of the vulnerability. You are more likely to receive an increased reward if you show how the vulnerability can be used to cause maximum harm.
Here is a list of approximate rewards for finding vulnerabilities:
Remote code execution
$5000
Manipulation of user balances
$3000
XSS/CSRF/Clickjacking affecting actions with user balances/trading/exchange/deposit
$2000
Theft of information related to passwords/API keys/personal information
$2000
Partial authentication bypass
$1500
Other vulnerabilities that can lead to financial losses or data leakage
$500
Other CSRF (except CSRF logout)
$500
Rewards will NOT be granted for DDoS, Self-XSS, Spam, Social engineering attacks.
Have you found a vulnerability?
To report it, send us an email; we will contact you as soon as possible and resolve the issue.
Contact Support Send vulnerability to Security
