Skip to content

Commit

Permalink
update the doctrees (English version)
Browse files Browse the repository at this point in the history
  • Loading branch information
smalloranges committed Dec 11, 2019
1 parent b92f6d1 commit b8e73af
Show file tree
Hide file tree
Showing 56 changed files with 2,000 additions and 2,170 deletions.
69 changes: 27 additions & 42 deletions docs/bounty-program.md
Original file line number Diff line number Diff line change
@@ -1,24 +1,30 @@
# Bounty Program
Nearly all projects are posted on the [Nebulas Project Page](https://go.nebulas.io) along with their corresponding bounties, and users are expected to apply in order to claim a project or parts of it. This process applies to the wiki and to the NAT Bug Bounty Program. For now, the Nebulas Bug Bounty Program only requires you to submit a [form](https://docs.google.com/forms/d/e/1FAIpQLScaCeODU26maPJIuyCkX6Lsa0A5Xi2AZ_z-mvKlHmd89_CaXQ/viewform) with the relevant information.

Below you will find in-depth information about all the Bounty Programs so you can get started on contributing to the flourishing Nebulas ecossystem and get rewarded for it!

## The Nebulas Wiki Bounty Program
Previously users who created or modified content on the Nebulas Wiki were entitled to potentially win a bounty in the form of NAS. Nowadays, the process is quite different.
Nearly all projects are posted on the **Nebulas Community Collabration Platform: [Go.nebulas.io](https://go.nebulas.io)** along with their corresponding bounties, and users are expected to apply in order to claim a project or parts of it. This process applies to the wiki and to the NAT Bug Bounty Program. For now, the Nebulas Bug Bounty Program only requires you to submit a [form](https://goo.gl/forms/5ysl61Mjpn6yDEuN2) with the relevant information.

To qualify for the wiki bounty, go to the aforementioned project page and search for "wiki," or simply click [here](https://go.nebulas.io/search?q=wiki) to see all the available listings.
Below you will find in-depth information about all the Bounty Programs so you can get started on contributing to the flourishing Nebulas ecossystem and get rewarded for it!

## Bug Bounty

## The Nebulas Bug Bounty Program
The Nebulas Bug Bounty aims to improve the security of Nebulas Ecosystem, ensuring the establishment of a benign Nebulas ecosystem. The Nebulas Bug Bounty Program provides bounties for the discovered vulnerabilities. This bounty program was initiated and implemented by the Nebulas Technical Committee (NTC), in conjunction with the Nebulas technical team, and community members. NTC encourages the community to disclose security vulnerabilities via the process described below, and play a role in building the Nebulas ecosystem, thereby receiving bounties, and partaking in the evolution of the Nebulas ecosystem.

### Bug Category
The Bug Bounty Program divides the bug bounties into 2 categories, common bug bounty and special bug bounty. The common bugs include vulnerabilities discovered in Nebulas mainnet, Nebulas testnet, nebPay, Web wallet, neb.js and others, while the special bugs include vulnerabilities found in the inter-contract call function, etcetera.
The Bug Bounty Program divides the bug bounties into 2 categories, common bug bounty and special bug bounty. The common bugs include vulnerabilities discovered in:

* Nebulas mainnet
* NAS nano pro
* nebPay
* Web wallet
* neb.js
* Bug Bounty on Testnet
* others

While the special bugs include vulnerabilities found in the inter-contract call function, etcetera.

### Eligibility
The Nebulas Technical Committee will evaluate reward sizes according to the severity calculated by [OWASP](https://www.owasp.org/index.php/OWASP_Risk_Rating_Methodology) Risk Rating Method based on **Impact** and **Likelihood**. However, final rewards are determined at the sole discretion of the committee.

![Image 1](https://cdn-images-1.medium.com/max/1600/1*rR7P3JTHT2KFAYTDodsilw.jpeg)
![Overall Risk Severity](https://cdn-images-1.medium.com/max/1600/1*rR7P3JTHT2KFAYTDodsilw.jpeg "Overall Risk Severity")

**Impact:**
- High: Bugs affecting asset security.
Expand All @@ -34,11 +40,11 @@ The Nebulas Technical Committee will evaluate reward sizes according to the seve
To ensure the bug reporter obtains a stable expected reward, the amount in US dollars will be issued in equivalent NAS.
The reward amount is divided into 5 categories:

> - Critical: US$1,000 or more (No upper limit)
> - High: US$500 or more
> - Medium: US$250 or more
> - Low: US$100 or more
> - Improvement: US$30 or more
- Critical: US$1,000 or more (No upper limit)
- High: US$500 or more
- Medium: US$250 or more
- Low: US$100 or more
- Improvement: US$30 or more

Note: The Nebulas testnet special vulnerability reward (such as one for testnet inter-contract call function) has been increased accordingly, and the equivalent US dollars are issued in NAS.

Expand All @@ -47,33 +53,12 @@ Please send your bug report via [this link](https://goo.gl/forms/5ysl61Mjpn6yDEu

**Things to keep in mind:**

> 1. Please ensure the accuracy and clarity of the content, because the reward evaluation will be based on the content submitted in this form.
> 2. If many people discover the same bug, then their report submissions in chronological order will determine their reward. Community users are welcome to discuss the issues of bugs, but the discussion itself is not considered a report, therefore a report form must still be submitted.
1. Please ensure the accuracy and clarity of the content, because the reward evaluation will be based on the content submitted in this form.
2. If many people discover the same bug, then their report submissions in chronological order will determine their reward. Community users are welcome to discuss the issues of bugs, but the discussion itself is not considered a report, therefore a report form must still be submitted.

### Additional notes:
> 1. The Nebulas Bug Bounty Program is long-standing. The Nebulas Technical Committee reserves the right to final interpretation of this program, and the rights to adjust or cancel the reward scope, eligibility, and amount.
> 2. The Nebulas Technical Committee will confirm and evaluate the bug report after its submission. The evaluation time will depend on the severity of the problem and the difficulty of its resolution. The result of the evaluation will be sent to its reporter by email as soon as possible.
> 3. To avoid the exploitation of bugs, reporters are required to submit the bug bounty application using the [proper forms](https://docs.google.com/forms/d/e/1FAIpQLScaCeODU26maPJIuyCkX6Lsa0A5Xi2AZ_z-mvKlHmd89_CaXQ/viewform).
> 4. Reporters shall keep the bugs non-public and confidential until 30 days after the bug submission to Nebulas, and shall not disclose the bugs to any third party. Such confidentiality time limit can be extended by Nebulas unilaterally. If reporters disclose the bugs to any third party and cause any harm to Nebulas or Nebulas’ users, reporters shall be responsible for the compensation for all the losses and damage.
> 5. The Nebulas Technical Committee encourages community members to converse with the Nebulas technical team and other community members in the Nebulas public discussion group. We also encourage our community members to join us in fixing these bugs. [Join our Nebulas maillist](https://lists.nebulas.io/cgi-bin/mailman/listinfo)!
## The Nebulas NAT Bug Bounty Program
NAT includes about 7 different smart contracts.

For bugs pertaining the NAT smart contracts, you may go [here](https://go.nebulas.io/project/147) to claim your bounty. Do note that you will still have to fill in the following [form](https://docs.google.com/forms/d/e/1FAIpQLScaCeODU26maPJIuyCkX6Lsa0A5Xi2AZ_z-mvKlHmd89_CaXQ/viewform) detailing your bug, after claiming, in order to become elligible for the bounty.

The smart contracts can be updated at any time. They are listed below:

> multisig: n1orrpFGmcQSvGrbKTD7RHweTPe61ut7svw
> NAT NRC20: n1mpgNi6KKdSzr7i5Ma7JsG5yPY9knf9He7
> distribute: n1uBbtFZK3Acs2T6JUMv6bSAvS6U6nnur6j
> pledge_proxy: n1obU14f6Cp4Wv7zANVbtmXKNkpKCqQDgDM
> pledge: n1zmbyLPCt2i8biKm1tNRwgAW3mhyKUtEpW
> vote: n1pADU7jnrvpPzcWusGkaizZoWgUywMRGMY
> NR_DATA: n21KaJxgFw7gTHR9A5VFYHsQrWdL61dCqvK
1. The Nebulas Bug Bounty Program is long-standing. The Nebulas Technical Committee reserves the right to final interpretation of this program, and the rights to adjust or cancel the reward scope, eligibility, and amount.
2. The Nebulas Technical Committee will confirm and evaluate the bug report after its submission. The evaluation time will depend on the severity of the problem and the difficulty of its resolution. The result of the evaluation will be sent to its reporter by email as soon as possible.
3. To avoid the exploitation of bugs, reporters are required to submit the bug bounty application using the [proper forms](https://goo.gl/forms/5ysl61Mjpn6yDEuN2).
4. Reporters shall keep the bugs non-public and confidential until 30 days after the bug submission to Nebulas, and shall not disclose the bugs to any third party. Such confidentiality time limit can be extended by Nebulas unilaterally. If reporters disclose the bugs to any third party and cause any harm to Nebulas or Nebulas’ users, reporters shall be responsible for the compensation for all the losses and damage.
5. The Nebulas Technical Committee encourages community members to converse with the Nebulas technical team and other community members in the Nebulas public discussion group. We also encourage our community members to join us in fixing these bugs.
12 changes: 0 additions & 12 deletions docs/community/README.rst

This file was deleted.

20 changes: 0 additions & 20 deletions docs/community/ama.md

This file was deleted.

34 changes: 0 additions & 34 deletions docs/community/announcement.md

This file was deleted.

0 comments on commit b8e73af

Please sign in to comment.