Bug Bounty Program

We encourage you to responsibly disclose security vulnerabilities through the following methods:

1. Send an email to engineering-ext@ferrum.network describing the vulnerability.

Out of Scope Vulnerabilities

Most vulnerabilities identified using widely-available automated tools, such as improper domain configuration, are typically out of scope for our primary bug bounty program. However, we may still award a bounty of up to USD $1000 for such submissions if they are sent to engineering-ext@ferrum.network and are deemed valuable.

Submission Guidelines

• Initial Submission: Provide a short note describing the issue, including the potential impact and any initial findings. If more details are required, we will follow up with a request for a detailed report.
• Detailed Report: If requested, your detailed report should include steps to reproduce the vulnerability, potential impact, and any possible mitigations.

We greatly appreciate your contributions to the security of our network and look forward to your valuable submissions. Thank you for helping us maintain a secure and robust system!