| Project | Supported |
|---|---|
| GambaReload | ✅ Active |
| Stablecoin Aggregators | ✅ Active |
| Legacy Projects |
Email: security@vln.gg
PGP Key: Available upon request
- Type of vulnerability (smart contract, API, frontend, infrastructure)
- Affected component and version
- Step-by-step reproduction instructions
- Proof of concept (if available)
- Potential impact assessment
- Suggested remediation (optional)
| Stage | Timeline |
|---|---|
| Initial acknowledgment | 24 hours |
| Severity assessment | 72 hours |
| Status update | 7 days |
| Resolution target | 30-90 days (severity dependent) |
FUSED GAMING may offer rewards for responsibly disclosed vulnerabilities.
- First reporter of a valid, previously unknown vulnerability
- Did not exploit the vulnerability beyond proof of concept
- Did not violate user privacy or data
- Followed responsible disclosure practices
| Severity | Smart Contract | Infrastructure | Frontend |
|---|---|---|---|
| Critical | $5,000-$25,000 | $2,000-$10,000 | $500-$2,000 |
| High | $2,000-$5,000 | $1,000-$2,000 | $250-$500 |
| Medium | $500-$2,000 | $250-$1,000 | $100-$250 |
| Low | $100-$500 | $50-$250 | $25-$100 |
Rewards are at our discretion and depend on impact, quality of report, and funds availability.
- Social engineering attacks
- Physical security issues
- Denial of service attacks
- Third-party services we don't control
- Previously reported vulnerabilities
We will not pursue legal action against researchers who:
- Act in good faith
- Avoid privacy violations
- Avoid data destruction
- Do not exploit vulnerabilities maliciously
- Report findings promptly
Contact: security@vln.gg Last updated: December 2024