Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
40 changes: 40 additions & 0 deletions public/articles/bug-bounty-program.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,40 @@
---
title: "Bug Bounty Program for Gluon on Ergo"
author: "Zahnentferner"
date: "2024-07-10"
image: "/images/gluon-stablecoin-bug-bounty-program.webp"
excerpt: "Gluon is launching a bug bounty program on Ergo — security researchers are invited to report vulnerabilities."
---

# Bug Bounty Program for Gluon on Ergo

We’re launching a Bug Bounty Program for The Stable Order’s implementation of the Gluon Protocol on the Ergo blockchain. Gluon is a new and innovative stablecoin protocol designed by Dr. Bruno Woltzenlogel Paleo (a.k.a. Zahnentferner). Gluon Gold on Ergo ([<u>https://gluon.gold</u>](https://gluon.gold)) is the first implementation of this protocol in the blockchain space, with the stablecoin pegged to gold. This represents a significant advancement in stablecoin technology on the Ergo blockchain.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Remove HTML underline tags from markdown link syntax.

Markdown links should not contain HTML tags within the link text. The <u> underline tags in [<u>...</u>](url) are non-standard and unnecessary. Use clean markdown link syntax instead.

Apply these diffs:

-Gluon Gold on Ergo ([<u>https://gluon.gold</u>](https://gluon.gold)) is the first implementation
+Gluon Gold on Ergo ([https://gluon.gold](https://gluon.gold)) is the first implementation
-Program Scope: This bug bounty program only covers critical bugs found in the code repository at [<u>https://github.com/DjedAlliance/Gluon-Ergo-Backend-Contracts</u>](https://github.com/DjedAlliance/Gluon-Ergo-Backend-Contracts).
+Program Scope: This bug bounty program only covers critical bugs found in the code repository at [https://github.com/DjedAlliance/Gluon-Ergo-Backend-Contracts](https://github.com/DjedAlliance/Gluon-Ergo-Backend-Contracts).
-Reporting Process: Please report the critical bug to [<u>gluon.alliance@gmail.com</u>](mailto:gluon.alliance@gmail.com).
+Reporting Process: Please report the critical bug to [gluon.alliance@gmail.com](mailto:gluon.alliance@gmail.com).
-Questions? If you have any questions or concerns, feel free to reach out to us on our Discord server: [<u>https://discord.gg/xgUybE4s7G</u>](https://discord.gg/xgUybE4s7G).
+Questions? If you have any questions or concerns, feel free to reach out to us on our Discord server: [https://discord.gg/xgUybE4s7G](https://discord.gg/xgUybE4s7G).

Also applies to: 15-15, 17-17, 38-38

🤖 Prompt for AI Agents
In public/articles/bug-bounty-program.md around lines 11, 15, 17 and 38, remove
the HTML <u> underline tags wrapped inside markdown link text (e.g.
`[<u>https://...<\/u>](...)`) and replace them with plain markdown link text
(e.g. `[https://...](...)`) so the links use standard markdown syntax without
embedded HTML; update each occurrence accordingly and verify rendering.


The bug bounty program aims to protect users and their funds from potential vulnerabilities in the smart contract. We’ll be rewarding anyone who identifies and reports critical bugs that could enable fund theft.

Program Scope: This bug bounty program only covers critical bugs found in the code repository at [<u>https://github.com/DjedAlliance/Gluon-Ergo-Backend-Contracts</u>](https://github.com/DjedAlliance/Gluon-Ergo-Backend-Contracts). Critical bugs are defined as vulnerabilities that could allow an attacker to steal funds. For non-critical bugs, please contact us.

Reporting Process: Please report the critical bug to [<u>gluon.alliance@gmail.com</u>](mailto:gluon.alliance@gmail.com). Reach out to us privately on Discord or Telegram. Do not disclose the bug publicly until it is resolved. If possible, please exploit the bug to secure and return any affected user funds. We will work together to resolve the issue quickly.

Reward Structure: We offer a reward in gluons (The Stable Order’s contribution accounting token). The *initial reward amount* is equal in value to the sum of the following:

- A base reward of 50,000 gluons.
- 50% of the funds that could have been stolen from Gluon Gold on Ergo at the moment when it is reported.
- 50% of the funds that were safeguarded by the bug reporter, if they exploited the bug, secured the funds, and returned them to the users.

To encourage bugs to be reported quickly, the reward amount decreases linearly as time passes until a minimum reward amount is reached, according to the following formula:

R(t) = max((1 — t/1000) \* R\* , R\*/10)

Where:

- R* is the initial reward amount.
- t is the number of days between the day in which the bug was reported and 2024–07–10 (10th of July 2024)

Transparency: As part of our bug bounty program, we will publicly disclose every critical bug that has been resolved, along with details about the resolution process. This includes the total payout amount (in gluons) and the average resolution time, while protecting the identities of the bug reporters.

By participating in this program, you’ll be contributing to the security and protection of Gluon Gold on Ergo and its users. We’re excited to collaborate with security researchers who share our dedication to securing blockchain and smart contract systems.

Questions? If you have any questions or concerns, feel free to reach out to us on our Discord server: [<u>https://discord.gg/xgUybE4s7G</u>](https://discord.gg/xgUybE4s7G). Thank you for your interest in securing the Gluon Stablecoin Protocol.

*Note: This announcement was written by Cannon_q, Ergo's Sigmanaut and Knight of the Stable Order.*
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.