Tonstakers offers an innovative DeFi staking solution on the TON blockchain, allowing users to stake TON tokens and receive tsTON—a liquid staking derivative representing staked assets plus rewards. This mechanism enables users to maintain liquidity and engage in other DeFi activities without forfeiting staking benefits.
Program Overview Tonstakers operates a dedicated bug bounty program to ensure the security and resilience of its staking infrastructure and smart contract ecosystem. The program invites ethical hackers and security researchers to responsibly disclose vulnerabilities that could impact the Tonstakers platform or its users, strengthening overall trust and technical integrity.
Reward Structure All valid submissions are assessed using a 4-tier severity model, with reward amounts determined by the criticality of the issue and the component affected. For critical smart contract vulnerabilities, rewards are capped at 2% of the economic damage, with primary consideration given to funds directly at risk. Secondary considerations such as PR or brand impact may also influence final payouts, at the discretion of the Tonstakers team. For high-severity vulnerabilities, rewards may reach up to 100% of the funds affected, with calculations based on market conditions at the time of the report submission.
Submission Requirements To qualify for a reward, bug reports must include a detailed proof of concept (PoC) in the form of executable code, along with step-by-step reproduction instructions. The report must clearly demonstrate the end-effect of the vulnerability on an in-scope asset. Submissions without code-based PoC or those based solely on written explanations will not be considered.
Payouts Rewards are denominated in USD-equivalent value and paid out in TON, Tonstakers’ native token. All bounties are processed by the Tonstakers team upon successful validation and KYC compliance.
