# Introducing ParaSpell XCM Tools Bug bounty 🪲

**URL:** <https://forum.polkadot.network/t/introducing-paraspell-xcm-tools-bug-bounty/14094>\
**Category:** Ecosystem\
**Tags:** xcm\
**Created:** [July 28, 2025, 2:19pm UTC](https://forum.polkadot.network/t/introducing-paraspell-xcm-tools-bug-bounty/14094 "2025-07-28T14:19:26Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![dudo50](https://dub1.discourse-cdn.com/flex005/user_avatar/forum.polkadot.network/dudo50/32/478_2.png) [@dudo50](https://forum.polkadot.network/u/dudo50)\
**Post date:** [July 28, 2025, 2:19pm UTC](https://forum.polkadot.network/t/introducing-paraspell-xcm-tools-bug-bounty/14094/1 "2025-07-28T14:19:26Z")

</div>

**Dear Polkadot forums community! 👋**

After our successful [referenda](https://polkadot.subsquare.io/referenda/1641), we’re excited to officially launch the **Bug Bounty Program** for [`xcm-tools`](https://github.com/paraspell/xcm-tools) with `10K USDC` reward pool!  
If you’re a developer, tester, or power user, this is your opportunity to **get rewarded for improving the project** — whether by reporting bugs or fixing them.

* * *

## 💡 How It Works

### 🐞 Report a Bug

- Open an [issue in the repository](https://github.com/paraspell/xcm-tools/issues) and select `Bug bounty report`

- Rewards based on severity:

### 🔧 Fix a Bug

- Claim an open issue by commenting:

- You’ll have **48 hours** to submit a PR (Can be extended if needed).

- Rewards based on complexity:

* * *

## 📏 How We Judge

- **Severity** : Based on the bug’s impact (UI glitch vs crash/security flaw).
- **Complexity** : Based on size of the fix, files changed, tests included, etc.

Details here 👉 [Official documentation](https://paraspell.github.io/docs/contribution.html)

* * *

Let’s build a better XCM tool stack together 🦾.

If you have any suggestions on how to improve the program feel free to let us know ✨. Thanks!

With kind regards,  
Team ParaSpell✨

---

<div class="post-metadata">

**Author:** ![dudo50](https://dub1.discourse-cdn.com/flex005/user_avatar/forum.polkadot.network/dudo50/32/478_2.png) [@dudo50](https://forum.polkadot.network/u/dudo50)\
**Post date:** [July 21, 2026, 7:24am UTC](https://forum.polkadot.network/t/introducing-paraspell-xcm-tools-bug-bounty/14094/2 "2026-07-21T07:24:00Z")

</div>

We would like to bump this thread.

We still have approximately 4.000$ in the bounty left.

We would like to thank every bug finder in advance!

The docs have been reconstructed so link in main post no longer works. Here is new link for bug bounty information: [🛠️ Contributing to xcm-tools | ParaSpell](https://paraspell.github.io/docs/contribution-guidelines.html)

With kind regards,

Team ParaSpell​✨