If you discover a security vulnerability in pet that dog!, please follow these steps:
- DO NOT disclose the vulnerability publicly
- Contact us through:
- Twitter: @pet_thatdog
- GitHub: Create a private security advisory at https://github.com/bgoober/pet-that-dog/security/advisories/new
- Initial Response: As soon as possible
- Status Update: As soon as possible
- Resolution Timeline: Case-by-case basis depending on severity
Currently, we do not offer a formal bug bounty program. However, we deeply appreciate responsible disclosure and will acknowledge security researchers who report valid vulnerabilities.
In scope:
- Smart contract vulnerabilities
- Logic errors that could lead to unintended behavior
- Economic attacks on the protocol
- Front end vulnerabilities that could cause loss of user funds or malicious transaction spoofing or injections, etc.