pSTAKE partners with Immunefi
pSTAKE partners with Immunefi to launch a bug bounty program. The pSTAKE is on the path to creating a comprehensive and robust multi-chain liquid staking ecosystem.
pSTAKE aim to have millions of user funds liquid staked via the protocol, security is of the utmost importance for them.
Immunefi is Web3’s leading bug bounty platform (protecting USD100 billion in user funds) through which security researchers, developers, and more can review code and disclose vulnerabilities in smart contract-based applications for compensation.
The bug bounty program covers stkBNB’s smart contracts and apps and is focus on the prevention of loss of user funds, denial of service, governance hijacks, data breaches, and data leaks.
Rewards by Threat Level
Based on the Immunefi Vulnerability Severity Classification System 2 (IVSCS), rewards are distributed according to the impact of the vulnerability.
This is a simplified 5-level scale (separate for websites/apps and smart contracts/blockchains) encompassing all the aspects of a bug, from the consequence of a successful exploit to the level of access required to exploit it, to the probability that an exploitation attempt will be successful.
Smart Contracts and Blockchain*
- Critical – USD 25,000 to USD 300,000
Loss of user funds:
📌 10% of assets at risk, minimum USD 50,000 and maximum USD 300,000
Loss of non-user funds (e.g. treasury):
🌠 10% of assets at risk, minimum USD 25,000 and maximum USD 200,000 - High – USD 20,000 to USD 100,000
👉🏽 10% of assets at risk, minimum USD 20,000 and maximum USD 100,000 - Medium – USD 20,000
- Low – USD 1,000
Website and Apps*
- Critical – USD 20,000
- High – USD 5,000
- Medium – USD 2,000
- Low – USD 1,000
The numbers mentioned above are tentative and finalizes before launching the bug bounty program. The impacts covered by the bug bounty program & their severities will be updated on the stkBNB Immunefi Bug Bounty Program page.
All smart contracts, and web and app bugs must come with a Proof of Concept (PoC) to be accepted. All such bug reports without a PoC will be rejected with a request to include the PoC.
Payouts handle by the pSTAKE team directly and are denominates in USD. Payouts in PSTAKE, USDC, and BUSD, at the discretion of the pSTAKE protocol.
ABOUT pSTAKE
pSTAKE is a liquid staking protocol unlocking the liquidity of staked assets. Stakers of PoS tokens can now stake their assets while maintaining the liquidity of these assets. On staking with pSTAKE, users earn staking rewards and also receive 1:1 peg stake representative tokens (stkTOKENs) which use in DeFi to generate additional yield (yield on top of staking rewards).
ABOUT Immunefi
Immunefi is Web3’s leading bug bounty platform, protecting $100 billion in user funds.
RESOURCES
