TomoX Testnet Bounty Program — Phase 2
TomoX Testnet Bounty Program — Phase 1 was launched last December to encourage and reward members of the TomoChain community for identifying significant bugs and suggesting new features. We have received a lot of suggestions and feedback, and highly appreciate your support. Kindly note that Phase 1 has concluded as of today, Jan 20th, 2020.
TomoX Testnet Bounty Program — Phase 2 is now active (effective immediately). We invite everyone to proactively identify all security vulnerabilities in TomoX products with the following rules:
Your mission: Report bugs.
The bonus is based on the technical severity of the reported vulnerabilities, ranging from 50 TOMO to 1000 TOMO
Our rewards are based on severity per CVSS (the Common Vulnerability Scoring Standard).
Time estimation:
- Review and Discussion: We will respond in 3 working days. The actual length of time from Response to Eligible Bug Confirmation depends on the complexity of the issue.
- Issue Resolution: 10 working days
- Bounty Rewarded: On the first working day of the following month
Please note these are general guidelines, and response decisions are up to the discretion of TomoChain Pte. Ltd.
* All previous issues submitted on Phase 1 (before Phase 2 official Announcement kickoff on Jan 20st, 2020) will still apply TomoX Testnet Bounty Program — Phase 1 guidelines and reward scheme.
Guidelines
A bug report must follow the following process to be considered for rewards:
- Create an issue on TomoChain Github Bug Reports Repository: https://github.com/tomochain/bug-reports. Please include your TomoWallet address in the report.
- You should report the issue in detail with reproducible steps (Please attach all supporting files (e.g. video, screenshots, configuration files, data files, output files, etc.). If the report is not detailed enough to reproduce the issue, the finder will not be eligible for rewards.
- A proposal(s) to address or fix the issue is highly recommended. This could be a design proposal or include actual fix(es) to software code.
- Issues already submitted by another user or already known to the TomoChain team are not eligible for bounty rewards.
- Kindly note that any issue found and made public in any way forfeits the finder’s right to the bounty.
- Multiple bugs caused by one underlying issue will be awarded one bounty.
- Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our service. Only interact with accounts you own or with the explicit permission of the account holder.
Scope of Bounty
1. TomoDEX — TomoChain’s DEX based on the TomoX protocol:
Site: https://dex.testnet.tomochain.com
Source code: https://github.com/tomochain/tomox-sdk and
https://github.com/tomochain/tomox-sdk-ui
2. TomoRelayer — Launch and Manage your DEX:
Site: https://relayer.testnet.tomochain.com
Source code: https://github.com/tomochain/tomorelayer
TomoX — The core protocol enabling the permissionless DEX network:
Source code: https://github.com/tomochain/tomochain
Testing Guidance
Please read our Medium blog post to get a quick understanding of the TomoX product as below:
Network Statistics:
High-level view of the masternode and DEX network on TomoChain’s testnet:
https://stats.testnet.tomochain.com
Follow this guide to know how to run a TomoX Relayer: https://docs.tomochain.com/masternode/tomox-sdk/
TomoDEX:
Follow this guide to know how to use TomoChain’s own DEX, or any other DEX powered by TomoX:
TomoRelayer:
Follow this guide to launch and manage a DEX on TomoX: https://medium.com/tomochain/launch-your-own-dex-with-tomorelayer-eb440a2d6a3d
Terms and Conditions:
- TomoChain reserves the right to cancel or amend the Program and the Program rules at its own discretion.
- Each participant is responsible for monitoring his/her Github account for notification or other communications related to this Program.
- If a potential reward winner cannot be reached by TomoChain within ten (10) working days, that potential reward winner shall forfeit the prize.
- Rewards are made at the sole discretion of TomoChain.
- TomoChain’s core development team, employees and all other people paid by the TomoChain project, directly or indirectly, are not eligible for rewards.
For further information or questions regarding the TomoX Testnet Bounty Program , please join and contact us through the following channels:
Gitter: https://gitter.im/tomochain
TomoX Telegram Channel: https://t.me/TomoX
