Dear Polkadot forums community! ![]()
After our successful referenda, we’re excited to officially launch the Bug Bounty Program for xcm-tools with 10K USDC reward pool!
If you’re a developer, tester, or power user, this is your opportunity to get rewarded for improving the project — whether by reporting bugs or fixing them.
How It Works
Report a Bug
-
Open an issue in the repository and select
Bug bounty report -
Rewards based on severity:
Very Low: $5
Low: $10
Medium: $20
High: $30
Fix a Bug
-
Claim an open issue by commenting:
I would like to reserve this issue. -
You’ll have 48 hours to submit a PR (Can be extended if needed).
-
Rewards based on complexity:
Very Low: $15
Low: $10–$20
Medium: $30–$70
High: $80–$250+
How We Judge
- Severity: Based on the bug’s impact (UI glitch vs crash/security flaw).
- Complexity: Based on size of the fix, files changed, tests included, etc.
Details here
Official documentation
Let’s build a better XCM tool stack together
.
If you have any suggestions on how to improve the program feel free to let us know
. Thanks!
With kind regards,
Team ParaSpell✨