Jax.Network Blog
Published in

Jax.Network Blog

Jax.Money testing: rewards up to $20,000 and more!

by Ramyata Rao, Digital Marketing Manager at Jax.Network

Hello everyone!

We are running a global bounty program to test our Jax.Money platform and bring the revolutionary blockchain use case to the forefront for millions of users.

Scope

The scope of the bug bounty program will include any code, UI or general functionality bugs and is limited to the types of bugs listed below (in detail).

The purpose of the bounty is to invite the community to conduct the security and functionality testing of the Jax.Money platform on the testnet.

We are offering a reward prize for uncovering any flaws or bugs in security and supporting us in the development of a robust platform — Jax.Money.

When reporting vulnerabilities, please consider:
(1) attack scenario / exploitability, and
(2) security impact of the bug.

Categories/Environment for testing:

  1. Jax Wallet [Download] →
    Only Android: https://portal.testapp.io/apps/install/d34jlRDbeBJNj
  2. Github code [Link] → https://github.com/jaxwallet/jax-defi
  3. End-to-end website testing [Link] → https://beta.jax.money/

Fill out the participation form

Prerequisites for testing

Create BSC testnet:

Connect Metamask > Under Network > Add network.

Enter in the BSC testnet details as follows:

Import tokens:

Faucet funds for the following tokens (WJAX, JAXUD, JAXRE, BUSD, WJXN, VRP)

You can receive tokens from the faucet here → https://beta.jax.money/testfaucet.html

Make sure your wallet is connected and is running on the BSC test network.

Click on “Get Tokens” tab to add tokens to your wallet.

After this, token addresses and faucet funds will be automatically added to your wallet.

Note: This may take a minute or two to get faucet funds added to your wallet. Each user will receive 10,000 tokens (WJXN, WJAX, JAXUD, JAXRE and BUSD).

If tokens are not added to your wallet, try creating a new wallet and repeating the above steps in a separate tab.

OR

Step 1: Import tokens into your BEP-20-compatible wallet (eg: Metamask)

Step 2: Copy the token address and add to your wallet:

WJXN: 0x3A171b7C5d671e3C4Bb5823b8FD265F4E4e9a399

WJAX: 0x783f4A2EfAB4f34D6a0D88b71cf1FAc6d9B46FF0

JAXUD: 0xB8BDD95b52Ea5B815aAA214aeDB8d01Aed787157

JAXRE: 0xEc7D5848F88246cA6984b8019d08B8524793b062

BUSD: 0xa51BcDc792285598Ba7443c71D557e0B7Df6f991

VRP: 0x7EcaA5D422b91578899c0dEAD2891c127865c996

Levels

The bounty program has 3 levels for vulnerability resolution:

Levels for the bug bounty — Jax.Money

Participants can record the fields and the descriptions of the bugs (in the form provided). The team will internally categorize the bugs into the three categories mentioned above and rewards will be allocated accordingly. While participants can categorize the bugs according to what they feel is Low, Medium, Highly Critical.

But, the ultimate categorization will be at the discretion of the tech team and what they feel should be in the above categories.

Fill out the participation form

Example (Format): Name of a bug — Low Level — <Description>

Deposit function — Low — link not working, redirects to an unknown page

Bounty related doubts: Everyone should raise your questions in this bounty Telegram group, NOT in the main chat.

Details for end-to-end website testing

To perform any kind of transaction please make sure that your wallet has some BNB test tokens. If you do not have them, please receive them from here → https://testnet.binance.org/faucet-smart

Copy & Paste wallet address > Click on drop down “Give me BNB”. You should receive 1 BNB test token in your wallet.

Stake:

Swap: (https://beta.jax.money/swap_wjax.php)

  • WJAX <-> BUSD, WJAX <-> JAXRE
  • JAXUD <-> JAXRE, JAXUD <-> WJAX, JAXUD <-> BUSD
  • JAXRE <-> JAXUD, JAXRE <-> WJAX, JAXRE <-> BUSD
  • BUSD <-> JAXRE, BUSD <-> JAXUD

Transactions:

Sending and receiving transactions:

  • $WJAX
  • $JAXUD
  • $JAXRE

For every transaction — transaction fees are collected. Here is the transaction fees split:

  1. Transaction fee wallet* (capped value : eg 5 $WJAX)
  • Cashback (10%)
  • Referral (30%) — (70%, 10%, 10%, 10%)

2. DAO Tax (0.1%)

3. UBI Tax (0.1%)]

*Transaction fee wallet: (approx 60%-90%[without the referral fee added])

  • Governor (10%)
  • VRP (45%)
  • LP yield (45%)

To participate in the bug bounty:

Fill out the participation form

For any other steps like connecting a wallet or how to receive other tokens you can use the resources in the link below:

General: https://jax-network.gitbook.io/jax-money/

How to earn with Jax.Money: https://jax-network.gitbook.io/jax-money/how-to-earn-with-jax.money

Referral program: https://jax-network.gitbook.io/jax-money/referral-program

How to swap: https://jax-network.gitbook.io/jax-money/guides/how-to-swap

How to get VRP tokens: https://jax-network.gitbook.io/jax-money/guides/how-to-get-vrp-tokens

How to check yield: https://jax-network.gitbook.io/jax-money/guides/how-to-check-my-yield

Duration of the bounty

The bounty program to find vulnerabilities has a duration of 4 weeks (or less).

Start date: February 15th, 2022 | End date: March 14th, 2022.
Please Note: We can end the bug bounty before the due date.

Please take into consideration the deadline to submit any reports.

If you discover any other areas which may be considered as an exploitable vulnerability or harm the integrity of the platform or crypto asset, please reach out to info@jax.network and we will discuss on a case-by-case basis.

Bounty program rules:

[1] Find a bug and if it is proven then $WJXN tokens will be rewarded.

[2] Give your valuable suggestions, if implemented then $WJXN tokens will be rewarded.

[3] Our team will be checking the bugs on a weekly basis. The form can be filled anytime from Tuesday through Monday. Qualified bugs will receive bounty rewards in the following week on Mondays after the bug is reported.
Please Note: We can end the bug bounty before the due date.

[4] Filling up the form is required to participate in the bug bounty program.

[5] Any suspicious activity or use of multiple accounts is strictly forbidden. If found, the account of that user will be suspended without any prior notice.

[6] Jax.Network reserves the rights of any changes in payment of reward and terms & conditions of the bounty campaign.

[7] Any kind of spam, insult or abusive comments are strictly prohibited.

[8] Signing up on Jax.Network means the user agrees to the terms & conditions of all services of Jax.Network.

[9] Kindly discuss any matters regarding the bounty only here.

[10] When duplicates occur, we only award the first report that was received (provided that it can be fully reproduced).

[11] All software within the scope of this program must be run in the testnet mode.

[12] Testnet funds can be retrieved from the faucet at https://beta.jax.money/testfaucet.html

[13] Social engineering (e.g. phishing etc) is prohibited.

[14] Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our service.

[15] Please provide detailed reports with reproducible steps. If the report is not detailed enough to reproduce the issue, the issue will not be eligible for a reward.

Bug bounty ends on 14th March, 2022.
Please Note: We can end the bug bounty before the due date.

Questions?

In case you have any questions about this program, please do not hesitate to raise queries in our Telegram channel, our admins are always happy to help.

*We also propose to have a Bounty Leaderboard that participants can check from time to time to check the progress of our bug bounty program.

Don’t miss any announcement by subscribing to our social media accounts:

Official Website: https://jax.network

Twitter: https://twitter.com/CommunityJax

Facebook: https://www.facebook.com/network.jax/

Telegram Channel: https://t.me/jax_network

Bounty Group: https://t.me/JAX_Bug_Bounty

LinkedIn: https://www.linkedin.com/company/jax-network/

--

--

Jax.Network provides the technological infrastructure for a decentralized energy-standard monetary system. Our blockchain is anchored to the Bitcoin network and issues two digital currencies JAX and JXN.

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store