Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Moved security policy from issue into repo. #237

Merged
merged 2 commits into from
Feb 22, 2021
Merged

Moved security policy from issue into repo. #237

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
64e0e0a
Moved security policy from issue into repo. (GitHub recommended)
fuxingloh Feb 22, 2021
612d4de
Changed 20,000 DFI to 50,000 USD worth of DFI
fuxingloh Feb 22, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 7 additions & 17 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,22 +1,12 @@
# Security Policy
# DeFiChain Security Policy

> NOTE: This section is a work in progress for DeFi Blockchain, and may not be applicable at it's current state.
If you’ve found a vulnerability, please submit it privately via `[email protected]`.

## Supported Versions
## DeFiChain Testnet Bounty Program

See our website for versions of DeFi Blockchain that are currently supported with
security updates: https://bitcoincore.org/en/lifecycle/#schedule
> `defid -testnet`

## Reporting a Vulnerability
We offer a bug bounty of up to **$50,000 USD** worth of DFI for [DeFiCh/ain](https://github.com/defich/ain) critical
vulnerabilities. You must be able to provide significant information for reproducing and fixing the issue.

To report security issues send an email to [email protected] (not for support).

The following keys may be used to communicate sensitive information to developers:

| Name | Fingerprint |
|------|-------------|
| Wladimir van der Laan | 71A3 B167 3540 5025 D447 E8F2 7481 0B01 2346 C9A6 |
| Jonas Schnelli | 32EE 5C4C 3FA1 5CCA DB46 ABE5 29D4 BCB6 416F 53EC |
| Pieter Wuille | 133E AC17 9436 F14A 5CF1 B794 860F EB80 4E66 9320 |

You can import a key by running the following command with that individual’s fingerprint: `gpg --recv-keys "<fingerprint>"` Ensure that you put quotes around fingerprints containing spaces.
Only [official releases](https://github.com/DeFiCh/ain/releases), master branch development code are not included.