RED TEAM SURFACE / DRAFT
Break it.
The privacy layer uses new cryptography. A future public program should invite adversarial testing and publish responsibly disclosed results; that program is not open yet.
the deal before launch
The project plans to define what a meaningful break looks like before a public testnet and to make launch wait for verified fixes and retesting. No public testnet, vulnerability intake, bounty, award, or publication promise is currently active.
This is a draft program concept only. No one can currently earn money, credit, an invitation, or any other award. Official rules and confirmed funding must be published before submissions open.
the test network — where you come in
The future plan is to run public test networks with valueless test coins and explicit scopes for fuzzing, consensus, privacy, networking, wallet, and operational testing. Those networks and their safe-harbor/scope terms are not live.
proposed bounty + credit board
A capped $1,000 total pool has been discussed, but it is not funded, governed by official rules, or offered to the public. Eligibility, jurisdictions, age, taxes, sanctions, severity, duplicates, root-cause grouping, fix requirements, safe harbor, disclosure timing, payout source, dispute process, and event terms all remain unresolved.
A public credit board is also a proposal. Publication requires the reporter’s informed consent and a disclosure process that does not expose an unfixed vulnerability or personal information. Until those controls exist, this page creates no entitlement or promise.
No payment date exists. If a program opens, its official rules—not this draft—will control any award, credit, or recognition.
report something
No vulnerability intake or PGP key is currently published. Do not send sensitive vulnerability details through the hardware-interest form or ordinary contact email. A dedicated private channel, public key, scope, acknowledgment target, and disclosure policy are launch prerequisites.
The public invitation is not open yet. You can read the development status or submit non-binding hardware interest, but neither action enters a security program or guarantees first-block mining.