範圍內
For now, Supra's bug bounty program is scoped to two things: the vesting_with_drip contract below (deployed on Supra Testnet), and any vulnerability that results in direct financial loss, as defined under Severity & Rewards. All other targets and vulnerability types are out of scope until further notice.
In-Scope Contract: vesting_with_drip (Supra Testnet)
Move module deployed at:
0x0bbbc7c585d5cd161a1c42a19a257151e468ce7586d93d419c08c391b4e04e41We invite community developers to review this contract and responsibly report any issues they identify. Submissions follow the standard reporting process below and are assessed under the reward model described above. Please note that findings on this module are assessed as if it were deployed on Mainnet holding real value, and proving the technical mechanism on the deployed module is enough.
Supra擁抱開源哲學，經過完善的盡職調查後，我們的大部分程式碼都會透過相關論壇公開發布。由於這是我們構建的核心價值，因此原始碼外洩或類似情況不在我們的漏洞賞金計劃範圍內。
需要提交安全報告？
如果您要報告漏洞或與安全相關的問題，請通過電子郵件直接發送報告至：[email protected]