Program Active

$5,000 Bug Bounty

Help us secure digital legacies. Report vulnerabilities and earn rewards for responsible disclosure.

$5K

Max Reward

24h

Response

100%

Transparent

Submit Vulnerability View Guidelines

Bounty Structure

Reward Tiers

Rewards are determined by the severity and impact of discovered vulnerabilities

Critical

$2,500 – $5,000

Remote code execution
Authentication bypass
Data breach risks
Encryption flaws

High

$1,000 – $2,500

Privilege escalation
SQL injection
XSS vulnerabilities
CSRF attacks

Medium

$500 – $1,000

Information disclosure
Logic flaws
Rate limiting issues
Session management

Low

$100 – $500

Security best practices
Minor information leaks
UI/UX security issues
Configuration issues

Program Scope

What's Covered

In Scope

Eligible for rewards

🌐Web application (*.blockwill.io)

📱Mobile applications (iOS & Android)

🔌API endpoints and authentication

⛓️Smart contracts (blockchain layer)

🔐Encryption implementations

🛡️Access control mechanisms

Out of Scope

Not eligible

🎭Social engineering attacks

💥Denial of Service (DoS/DDoS)

🏢Physical attacks on infrastructure

📦Third-party services & dependencies

📧Spam or social engineering reports

📰Publicly known vulnerabilities

Simple Process

How It Works

Three straightforward steps to participate in our program

Discover

Identify a security vulnerability in our in-scope assets using responsible testing methods.

Report

Submit a detailed report with steps to reproduce, impact assessment, and suggested fixes.

Get Rewarded

Receive your reward after validation and resolution. Timeline: 24h response, 7-14 days payout.

Report Requirements

Include these details for faster review

Detailed vulnerability description

Step-by-step reproduction steps

Proof of concept (screenshots/videos)

Impact and severity assessment

Affected URLs/endpoints

Suggested remediation (optional)

Ready to Hunt?

Join our security researchers and help protect the digital legacies of millions worldwide.

Submit Vulnerability

Questions? Reach out at security@blockwill.io

A DIFC Innovation Company

BlockWill Analytical Technologies Limited

Level 2, Innovation One, DIFC, Dubai, UAE