1.Background

The security of the FILFI DAO system is critical to the FILFI protocol. To enhance the security of the protocol, FILFI DAO implemented a bounty program to encourage individuals or organizations to find and report errors and vulnerabilities in the protocol infrastructure and smart contracts. This move will help resolve potential problems in a timely manner and ensure the robustness of the agreement.

2. Classification and reward of bounty

The bounty program has different reward categories depending on the severity of the problem. The following are the categories of rewards and their corresponding maximum reward amounts:

Up to 500 U: Problems that may cause user dissatisfaction or minor technical failures.

Up to 2,500 U: Problems that may result in a small loss of less than 0.1% of the agreement funds, disrupt the status of the agreement, or cause serious user dissatisfaction or moderate technical failure.

Up to 5,000 U: may result in an immediate loss of 0.1% of the agreed funds. X < 10% or seriously damage the status of the agreement.

Up to 10,000 U: An issue that could result in an immediate loss of 10% or more of the agreement’s funds or permanently damage the status of the agreement.

3. Rules

The reward will vary according to the severity of the problem, while providing quality information can increase the reward. Here are some rules:

Questions submitted must meet the minimum severity criteria in order to receive an award.

The information submitted should include a description of the problem, a description of the recurring problem, and (optionally) a solution.

You can add more information about the reported issue by creating a new submission that references the initial issue.

4. Terms and Conditions of the Bug Bounty Program

FILFI DAO has the authority to determine the reward details for each event, and the terms and conditions of the Bug Bounty Program will be determined in FILFI DAO’s sole discretion. At the same time, any interference with the agreement or client/platform services will void the submission and disqualify it from the award.

5. Disclosure Policy

If a vulnerability is found, submitters are required to follow the following disclosure policy:

Write a detailed and accurate problem report and send it to the designated email address: [email protected].

Do not disclose any information about the issue to anyone outside the team.

Do not exploit the issue for personal gain.

Do not attack systems or protocols.

Once the report is received, FILFI DAO promises to:

Reply to the report as soon as possible.

The contents of the report shall be kept strictly confidential.

Provide updates on the status of your submission and problem resolution.

Reward the submitter for helping secure FILFI.

6. Conclusion

By implementing a bounty program and a clear disclosure policy, the FILFI DAO demonstrates a strong focus on security and encourages the active participation of the community in building a more robust and secure FILFI ecosystem. This initiative helps build trust and ensures the confidence of users and investors in the agreement.