No funded issue found.
Check out the Issue Explorer
Be the OSS Funding you wish to see in the world.
Looking to fund some work? You can submit a new Funded Issue here .
Time left
Opened
Issue Type
Workers Auto Approve
Project Type
Time Commitment
Experience Level
Permissions
Accepted
Reserved For
Aigang.Network Bug Bounty
aigangnetwork
Vue, JavaScript, CSS, Solidity, webpack, aigang, aix, bounty, bugbounty, html, ethereum, metamask
# Aigang.Network Bug Bounty [CLOSED]
## About
We are Aigang Team and we are targeting to build next-generation insurance product.
## Policy
We will evaluate reported security issues, bugs, features based on the impact to our users and the Aigang ecosystem.
This bounty brief describes the rules of the Aigang bug bounty program, as well as the eligibility of vulnerabilities and the rewards.
## Reward
Rewards will be paid out in AIX (Aigang Token). Once your submission is accepted the Aigang team will ask for your email address associated with your wallet to send you a reward. For this program we are setting up to 10,000$ budget!
Aigang may award an additional reward bonus for exceptional reports, or double up your reward if you submit a pull request with issue fix.
LEVEL 1 Critical: **$500 - $1000**
LEVEL 2 Severe: **$250 - $500**
LEVEL 3 Moderate: **$60 - $150**
LEVEL 4 Low: **$0 - $60**
*Please note that the TEAM will decide which level will be assigned for the issue and what reward will be paid.*
*We created the form where you can register for reward: [https://goo.gl/forms/xJJpOnlw22LGkVbl1](https://goo.gl/forms/xJJpOnlw22LGkVbl1)*
## Testing targets
**website** - [https://testplatform.aigang.network/](https://testplatform.aigang.network/)
**api** - [https://testapi.aigang.network/swagger/](https://testapi.aigang.network/swagger/)
**android app** - [https://github.com/AigangNetwork/aigang-insurance-app/tree/master/android](https://github.com/AigangNetwork/aigang-insurance-app/tree/master/android)
**insurance contracts** - [https://github.com/AigangNetwork/aigang-platform-contracts-insurance](https://github.com/AigangNetwork/aigang-platform-contracts-insurance)
**prediction market contracts** - [https://github.com/AigangNetwork/aigang-platform-contracts-predictions](https://github.com/AigangNetwork/aigang-platform-contracts-predictions)
## Preparation for testing
**Ropsten test network ETH**. You can generate them using Metamask browser extension ([https://metamask.io/](https://metamask.io/))
**TESTAIX tokens** you can generate them using our faucet ([https://aigangnetwork.github.io/testaix/](https://aigangnetwork.github.io/testaix/))
**Android device**
**Valid user** registered on ([https://testplatform.aigang.network/](https://testplatform.aigang.network/))
Whitelist your device ID in ([https://github.com/AigangNetwork/aigang-platform-web/issues/86](https://github.com/AigangNetwork/aigang-platform-web/issues/86)) to get more functionality for easier testing
## Scenario
We setup:
- 1 datasheet with our model:
- - Data - [https://testplatform.aigang.network/data/2b6e482338504b0fa7f1d5bcf3874e02/](https://testplatform.aigang.network/data/2b6e482338504b0fa7f1d5bcf3874e02/)
- - Model - [https://testplatform.aigang.network/data/2b6e482338504b0fa7f1d5bcf3874e02/models/bb93ed105c9f4a2498ac981792c5d20f/](https://testplatform.aigang.network/data/2b6e482338504b0fa7f1d5bcf3874e02/models/bb93ed105c9f4a2498ac981792c5d20f/)
- 3 predictions with initial balances:
- - 1 prediction [https://testplatform.aigang.network/predictions/prediction/558f1822aefb4815ae0d1796597ff314](https://testplatform.aigang.network/predictions/prediction/558f1822aefb4815ae0d1796597ff314)
- - 2 prediction [https://testplatform.aigang.network/predictions/prediction/558f1822aefb4815ae0d1796597ff315](https://testplatform.aigang.network/predictions/prediction/558f1822aefb4815ae0d1796597ff315)
- - 3 prediction [https://testplatform.aigang.network/predictions/prediction/558f1822aefb4815ae0d1796597ff316](https://testplatform.aigang.network/predictions/prediction/558f1822aefb4815ae0d1796597ff316)
- - Each day we will create some random short-term predictions.
- 1 Android battery insurance product:
- - Android - [https://testplatform.aigang.network/insurance/products/c36ad8690cb7462286948da2ef152a19](https://testplatform.aigang.network/insurance/products/c36ad8690cb7462286948da2ef152a19) 4 days long policies and 10 AIX base premium.
## Bugs registration
All bugs should be registered here: [https://github.com/AigangNetwork/aigang-platform-web/issues](https://github.com/AigangNetwork/aigang-platform-web/issues) or by email: [team@aigang.network](team@aigang.network)
Please note that only vulnerabilities with a working proof of concept that shows how it can be exploited or reproduced will be considered eligible for monetary rewards! Not reproducible or duplicate issues will not be rewarded.
## Actions to avoid
Testing on accounts other than those that you own
Excessive request attempts
Destruction of data
## Ineligible issues
Theoretical vulnerabilities without actual proof of concept
Email verification deficiencies, expiration of password reset links, and password complexity policies
Invalid or missing SPF (Sender Policy Framework) records (incomplete or missing SPF/DKIM/DMARC)
Clickjacking/UI redressing with minimal security impact
Email enumeration - For example, the ability to identify emails via password reset.
Information disclosure with minimal security impact (stack traces, path disclosure, directory listings)
Internally known issues, duplicate issues, or issues which have already been made public
Tab-nabbing
Vulnerabilities only exploitable on out-of-date browsers or platforms
Vulnerabilities related to auto-fill web forms
Use of known vulnerable libraries without actual proof of concept
Lack of security flags in cookies
Issues related to unsafe SSL/TLS cipher suites or protocol version
Content spoofing
Cache-control related issues
Missing security headers that do not lead to direct exploitation
CSRF with negligible security impact
Vulnerabilities that require root/jailbreak
Vulnerabilities that require physical access to a user's device
## Communication channels
**Developers** - [https://gitter.im/AigangNetwork/Lobby](https://gitter.im/AigangNetwork/Lobby)
**Email** - [team@aigang.network](team@aigang.network)
## Extra information
Developers wiki page [https://aigangnetwork.github.io/](https://aigangnetwork.github.io/)
AIX faucet (Ropsten network) [https://aigangnetwork.github.io/testaix/](https://aigangnetwork.github.io/testaix/)
Documentation [https://aigang.readthedocs.io/en/latest/](https://aigang.readthedocs.io/en/latest/)
*Company reserves the right, in its sole discretion, to modify this Program rules at any time.*
Setup your profile
Tell us a little about you:
Skills
No results found for [[search]] .
Type to search skills..
Bio Required
[[totalcharacter]] / 240
Are you currently looking for work?
[[ option.string ]]
Next
Setup your profile
Our tools are based on the principles of earn (💰), learn (📖), and meet (💬).
Select the ones you are interested in. You can change it later in your settings.
I'm also an organization manager looking for a great community.
Back
Next
Save
Enable your organization profile
Gitcoin products can help grow community around your brand. Create your tribe, events, and incentivize your community with bounties. Announce new and upcoming events using townsquare. Find top-quality hackers and fund them to work with you on a grant.
These are the organizations you own. If you don't see your organization here please be sure that information is public on your GitHub profile. Gitcoin will sync this information for you.
Select the products you are interested in:
Out of the box you will receive Tribes Lite for your organization. Please provide us with a contact email:
Email
Back
Save
