范围内
For now, Supra's bug bounty program is scoped to two things: the vesting_with_drip contract below (deployed on Supra Testnet), and any vulnerability that results in direct financial loss, as defined under Severity & Rewards. All other targets and vulnerability types are out of scope until further notice.
In-Scope Contract: vesting_with_drip (Supra Testnet)
Move module deployed at:
0x0bbbc7c585d5cd161a1c42a19a257151e468ce7586d93d419c08c391b4e04e41We invite community developers to review this contract and responsibly report any issues they identify. Submissions follow the standard reporting process below and are assessed under the reward model described above. Please note that findings on this module are assessed as if it were deployed on Mainnet holding real value, and proving the technical mechanism on the deployed module is enough.
Supra秉承开源理念，大部分代码最终将在经过充分尽职调查后，通过相关论坛公开发布。由于这是我们构建的核心价值之一，因此源码泄露等情况不在我们的漏洞赏金计划范围内。
需要提交安全报告？
如果您要报告漏洞或与安全相关的问题，请通过电子邮件直接发送报告至：[email protected]