Program Overview ZKSwap Finance operates a bug bounty program to proactively identify vulnerabilities within its smart contract infrastructure. The program aims to enhance the overall security and reliability of its Layer-2 ecosystem through responsible vulnerability disclosure from security researchers and ethical hackers.

Reward Structure The program is structured using a 4-tier severity model, with rewards based on both the criticality of the vulnerability and the asset class affected. For critical smart contract vulnerabilities, rewards are capped at 10% of the potential economic damage, factoring in the funds at risk, as well as reputational and brand impact at the discretion of the ZKSwap Finance team. For high-severity smart contract vulnerabilities, rewards may reach up to 100% of the funds affected. All calculations regarding the value at risk are based on on-chain conditions at the time the report is submitted.

Submission Requirements All bug reports must include a complete and functional proof of concept (PoC), along with clear reproduction steps that show the issue's real-world impact on an in-scope asset. Submissions based on theoretical descriptions or lacking executable code will not be considered for reward eligibility.

Payouts All rewards are denominated in USD and paid in USDT, disbursed directly by the ZKSwap Finance team following successful report validation and completion of KYC.