Security & Audits
Bug Bounty Program
Help us secure the Orion Protocol ecosystem. We reward white-hat security researchers and auditors for identifying and reporting vulnerabilities.
Critical
$100,000
Direct loss of funds or permanent freezing of smart contracts.
High
$25,000
Temporary locking of funds or price manipulation exploits.
Medium
$5,000
State manipulation or gas griefing attacks.
Low
$1,000
API logic flaws or informational security issues.
Program Scope
- Smart Contracts: Solidity routing contracts, settlement logic, liquidity pools, and token staking mechanisms.
- Web3 Execution Engine: Transaction simulation, slippage validation, and allowance management.
- Backend API & Infrastructure: Express REST routes, database integrity, rate limiters, and real-time SSE stream.
Submit a Report
Please include a detailed description of the vulnerability, reproduction steps, and proof-of-concept (PoC) code.