Get Double

Bounty Rewards

BNB Chain Fusion Needs Your Help!

The BNB Chain Fusion Security Highlight bug bounty program is a critical initiative to ensure the security of BNB Chain's transition to a single chain structure. We invite the security research community to rigorously examine the designated codebase and uncover potential vulnerabilities. During the BNB Chain Fusion process, we are providing the Double Bounty Rewards at our discretion for validly submitted security vulnerabilities.

Learn More
Submit a Bug

BNB Chain Fusion Security Highlight

  • Project Background and Objectives
  • Bounty Rewards
  • Scope
  • Out of Scope
  • Focus areas
  • More information

1. Project Background and Objectives

BNB Chain Fusion aims to streamline the network, enhance efficiency, reduce security risks, and align BNB Chain's architecture while decommissioning the BNB Beacon Chain.It guarantees a secure, smooth, and reliable transition from the dual-chain structure to a single chain. Learn more about BNB Chain Fusion.

2. Bounty Rewards

During the BNB Chain Fusion process, we are providing the Double Bounty Rewards at our discretion for validly submitted security vulnerabilities. This increased incentive underscores our commitment to robust security and recognition of your expertise.

Scope
Type Link In Scope Pull Request
Smart Contract https://github.com/bnb-chain/bsc-genesis-contract https://github.com/bnb-chain/bsc-genesis-contract/pull/436
Client Implementation https://github.com/bnb-chain/bsc https://github.com/bnb-chain/bsc/pull/2047
Balance Dump https://github.com/bnb-chain/node-dump Full Repo
Token Recover https://github.com/bnb-chain/token-recover-approver Full Repo
Out of scope
Type Link
Hard forks on BNB Beacon Chain
Focus areas
  • Staking Module
    • Uninterrupted blockchain operation during voting power transfer
    • Prevention of unauthorized BNB minting
    • Accurate reward distribution
    • Protection against malicious interference in validator elections
    • Correct slash functionality
    • Security of newly added precompiled contracts (BLS, Tendermint signatures)
    • Prevention of blockchain halting in the consensus engine and system calls
  • Governance Module
    • Prevention of unauthorized Govtoken minting
    • Protection against vote manipulation
    • Enforcement of mechanisms like time lockers
  • Token Migration
    • Accurate retrieval of BNB Smart Chain token balances for BNB Beacon Chain account holders
    • Prevention of obtaining unearned BNB Smart Chain tokens
  • Upgrade Safety
    • Protection against network control by a small minority of voting power during the upgrade

3. More Information

Feature related BEPs
Background reading

How to Get the Rewards

After finding a bug successfully, you will earn various rewards by the severity determined by the BNB Chain team.

Scope & Policy