Try to Break Parano1d ①

[ignotusnemo]

Parano1d Bug Hunt ① is open.

I am paying for previously unknown, reproducible bugs in the current mainnet code and official release binaries.

500 NOID for a confirmed non-critical mainnet bug with material impact on correctness, reliability or security.

10,000 NOID if you can prove that an unmodified mainnet release can:

• accept an invalid State or proof;
• allow unauthorized spending or issuance;
• disclose a wallet secret;
• execute attacker-controlled code remotely;
• deterministically split or halt the network.

These are the boundaries Parano1d is built to hold. If you can break one, prove it.

The bug must exist in the current mainnet release. A patch is welcome but not required. What matters is a concrete defect, its real impact and enough evidence to reproduce it.

Submit reports privately through Report a vulnerability. Include the affected release or commit, code path, expected and observed behavior, reproducible evidence and your NOID payout address.

Do not post an unpatched vulnerability in this Discussion.

AI and automated tools may be used, but raw model output, scanner output and speculative issue lists are not reports. Verify every claim against the exact mainnet code before submitting it.

Feature requests, redesign proposals, optimization ideas and bugs in third-party software are outside the Bug Hunt. One reward is paid per underlying defect. The first complete and reproducible private report has priority.

Full rules: Security policy

Use this category for general questions about scope, rewards and disclosed findings. Questions about an active report must remain inside its private security report.