Repository navigation

Security

SECURITY.md

Security Disclosure

Reporting a Vulnerability

Email security@nbs-bond-protocol.org with:

Description of the vulnerability
Steps to reproduce
Potential impact assessment
(Optional) Suggested fix

Bug Bounty

Critical smart contract vulnerabilities: up to $50,000 USDC Response SLA: 48h acknowledgement, 7 days triage

Scope

Soroban smart contracts (contracts/)
NestJS API (api/)
Oracle adapter scripts (oracle/)

There aren't any published security advisories