Ethical Research Policy
Responsible Vulnerability Disclosure Policy
We value the security research community. If you discover a vulnerability in any BotDigit service or smart contract, we invite you to report it safely under our Safe Harbor framework.
Our Safe Harbor Commitment
If you conduct vulnerability research in good faith and adhere to these guidelines, BotDigit commits to:
- Consider your activities authorized under applicable computer fraud and abuse laws.
- Not initiate or pursue legal action against you for accidental, good-faith violations.
- Acknowledge receipt of your vulnerability report within 24 hours.
- Award qualifying bounties and credit you on the BotDigit Security Hall of Fame.
Rules of Engagement
Do:
Test only against your own accounts or staging instances. Stop testing immediately upon discovering sensitive customer data.
Do Not:
Perform denial of service (DoS/DDoS) attacks, social engineer BotDigit staff, or modify customer data without explicit authorization.