Only web/app vulnerabilities that __directly__ affect the web/app assets listed in this table are accepted within the bug bounty program. All others are out-of-scope.

Router is a cross chain liquidity infrastructure primitive that aims to seamlessly provide bridging infra between various current and emerging layer-1 and layer-2 blockchain solutions, such as Matic and Ethereum.

Any governance voting result manipulation

Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield

Miner-extractable value (MEV)

Permanent freezing of funds

Protocol Insolvency

Critical Level - Direct economic damage

Theft of unclaimed yield

Permanent freezing of unclaimed yield

Temporary freezing of funds

High Level - Direct economic damage

Smart contract unable to operate due to lack of token funds

Block stuffing for profit

Theft of gas

Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol)

Unbounded gas consumption

Medium Level - Direct economic damage

Contract fails to deliver promised returns, but doesn't lose value

Rewards are distributed according to the impact of the vulnerability based on the [Immunefi Vulnerability Severity Classification System V2.2](https://immunefi.com/immunefi-vulnerability-severity-classification-system-v2-2). This is a simplified 5-level scale, with separate scales for websites/apps and smart contracts/blockchains, encompassing everything from consequence of exploitation to privilege required to likelihood of a successful exploit.

All bug reports must come with a PoC in order to be accepted. Additionally, all bug reports that are Medium or higher are required to include a suggestion for a fix in order to be considered for a reward.

Critical smart contract vulnerabilities are capped at __10%__ of economic damage, primarily taking into account the funds at risk. Other considerations such as PR and branding concerns may also be considered by the team at its discretion. However, the minimum reward amount is __USD 10 000__. 

Payouts are handled by the __Router__ team directly and are denominated in USD. Payouts are done in __ETH__, __USDT__, or __ROUTE__, at the discretion of the team.

Router

Resources & Documentation