[Program]: obol.org

[batamaji]

Company

obol.org

Program URL

https://docs.obol.org/advanced-and-troubleshooting/security/bug-bounty

Contact

security@obol.tech

Description

At Obol Labs, we prioritize the security of our distributed validator software and related services. Our Bug Bounty Program is designed to encourage and reward security researchers for identifying and reporting potential vulnerabilities. This initiative supports our commitment to the security and integrity of our products.

Rewards

• *bounty
• *recognition
• *swag

Program type

bounty

Status

active

Safe harbor

No response

Allows disclosure

No response

Domains

Charon the DV Middleware Client
Obol DV Launchpad and Public API
Obol Splits Contracts
Obol Labs hosted Public Relay Infrastructure

Structured scope

No response

Out of scope

Social engineering
Rate Limiting (Non-critical issues)
Physical security breaches
Non-security related UX/UI issues
Third-party application vulnerabilities
The Obol static website or the Obol infrastructure
The operational security of node operators running or using Obol software

Excluded methods

• dos
• social_engineering
• phishing
• physical_access
• automated_scanning

Requires account

No response

Minimum payout

500

Maximum payout

100000

Currency

USD

Payout - critical

100000

Payout - high

10000

Payout - medium

2500

Payout - low

499

Swag details

No response

Testing policy URL

No response

Response SLA days

No response

Disclosure timeline days

No response

Legal terms URL

No response

Hall of fame URL

No response

Reporting URL

No response

PGP key URL

No response

Preferred languages

No response

Standards

No response

Confirmation

• I confirm the information is accurate and I have included only publicly documented program details.

[liss-bot]

Hey @batamaji, thank you for your submission!
I've created a PR at #81 to get this merged in 😊