# Bug Bounty

## Candy Chain Bug Bounty Program

Candy Chain is committed to ensuring the security and stability of our blockchain technology. We believe in the collective power of the community to help us build a secure and reliable system. That's why we are excited to announce the Candy Chain Bug Bounty Program!

### Scope

The Bug Bounty Program is open to all of Candy Chain's services including:

* Main website: [candychain.com](https://candychain.com/)
* Documentation: [docs.candychain.com](https://docs.candychain.com/)
* Bridge: [bridge.candychain.com](https://bridge.candychain.com/)
* Swap: [swap.candychain.com](https://swap.candychain.com/)

### Rewards

Rewards are based on the severity of the vulnerability according to the following tiers:

* **Critical:** Up to $100,000 in Candy Coins
* **High:** Up to $50,000 in Candy Coins
* **Medium:** Up to $20,500 in Candy Coins
* **Low:** Up to $10,000 in Candy Coins

### Submission Guidelines

* Submit your findings to <bug@candychain.com>
* Provide detailed information, including steps to reproduce the vulnerability
* Include your contact information for follow-up
* Submit only original work, and do not disclose the bug publicly until it has been addressed

### Rules & Eligibility

* Responsible disclosure is a must
* Any testing must not harm Candy Chain's infrastructure or users
* Automated scanning is prohibited
* Submissions must be in English
* Employees of Candy Chain and their immediate family members are not eligible to participate

### Legal Terms

Participants must adhere to all applicable laws and regulations. Candy Chain reserves the right to modify or cancel this program at any time without prior notice.

By participating in the Candy Chain Bug Bounty Program, you agree to these terms.

For more information, please contact <bug@candychain.com>

Together, let's make Candy Chain the safest and most secure blockchain technology!

<br>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.candychain.com/developers/bug-bounty.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
