1:"$Sreact.fragment" 2:I[65437,["/_next/static/chunks/176cbwz04nwoo.js","/_next/static/chunks/01as9r5n5k.xo.js","/_next/static/chunks/0eke3m7v16498.js"],"default"] b:I[90774,["/_next/static/chunks/176cbwz04nwoo.js","/_next/static/chunks/01as9r5n5k.xo.js"],"OutletBoundary"] c:"$Sreact.suspense" 0:{"rsc":["$","$1","c",{"children":[[["$","$L2",null,{}],["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"BreadcrumbList\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https://nftwallet.app\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Bug Bounty\",\"item\":\"https://nftwallet.app/bug-bounty\"}]}"}}],["$","section",null,{"className":"page-section","children":["$","div",null,{"className":"content-container","children":[["$","div",null,{"className":"centered-page-header reveal","children":[["$","div",null,{"className":"section-label","children":"Security"}],["$","h1",null,{"className":"section-title","children":"Bug Bounty Program"}],["$","p",null,{"className":"section-sub","children":"Help us keep NFT Wallet secure. We reward responsible disclosure of security vulnerabilities."}]]}],["$","div",null,{"style":{"display":"flex","flexDirection":"column","gap":"1.25rem","marginBottom":"3rem"},"children":[["$","div","Critical",{"className":"reveal reveal-delay-1","style":{"background":"rgba(239,68,68,0.06)","border":"1px solid rgba(239,68,68,0.2)","borderRadius":"var(--radius)","padding":"1.5rem"},"children":[["$","div",null,{"style":{"display":"flex","justifyContent":"space-between","alignItems":"center","marginBottom":"1rem","flexWrap":"wrap","gap":"0.5rem"},"children":[["$","div",null,{"style":{"display":"flex","alignItems":"center","gap":"0.75rem"},"children":["$","span",null,{"style":{"fontWeight":800,"fontSize":"1rem","color":"#EF4444","background":"#EF444418","padding":"4px 14px","borderRadius":20,"border":"1px solid #EF444444"},"children":"Critical"}]}],["$","span",null,{"style":{"fontWeight":700,"fontSize":"1.1rem","color":"#EF4444"},"children":"$$5,000 – $50,000"}]]}],["$","ul",null,{"style":{"listStyle":"none","padding":0,"margin":0,"display":"flex","flexDirection":"column","gap":"0.4rem"},"children":[["$","li","Private key or seed phrase extraction from local storage",{"style":{"display":"flex","gap":"0.6rem","alignItems":"flex-start","fontSize":"0.87rem","color":"var(--muted)"},"children":[["$","span",null,{"style":{"color":"#EF4444","flexShrink":0,"marginTop":2},"children":"•"}],"Private key or seed phrase extraction from local storage"]}],["$","li","Remote code execution in the desktop application",{"style":{"display":"flex","gap":"0.6rem","alignItems":"flex-start","fontSize":"0.87rem","color":"var(--muted)"},"children":[["$","span",null,{"style":{"color":"#EF4444","flexShrink":0,"marginTop":2},"children":"•"}],"Remote code execution in the desktop application"]}],["$","li","Smart contract exploit draining bridge funds",{"style":{"display":"flex","gap":"0.6rem","alignItems":"flex-start","fontSize":"0.87rem","color":"var(--muted)"},"children":[["$","span",null,{"style":{"color":"#EF4444","flexShrink":0,"marginTop":2},"children":"•"}],"Smart contract exploit draining bridge funds"]}],["$","li","Authentication bypass leading to full wallet access",{"style":{"display":"flex","gap":"0.6rem","alignItems":"flex-start","fontSize":"0.87rem","color":"var(--muted)"},"children":[["$","span",null,{"style":{"color":"#EF4444","flexShrink":0,"marginTop":2},"children":"•"}],"Authentication bypass leading to full wallet access"]}]]}]]}],["$","div","High",{"className":"reveal reveal-delay-2","style":{"background":"rgba(245,158,11,0.06)","border":"1px solid rgba(245,158,11,0.2)","borderRadius":"var(--radius)","padding":"1.5rem"},"children":[["$","div",null,{"style":{"display":"flex","justifyContent":"space-between","alignItems":"center","marginBottom":"1rem","flexWrap":"wrap","gap":"0.5rem"},"children":[["$","div",null,{"style":{"display":"flex","alignItems":"center","gap":"0.75rem"},"children":["$","span",null,{"style":{"fontWeight":800,"fontSize":"1rem","color":"#F59E0B","background":"#F59E0B18","padding":"4px 14px","borderRadius":20,"border":"1px solid #F59E0B44"},"children":"High"}]}],["$","span",null,{"style":{"fontWeight":700,"fontSize":"1.1rem","color":"#F59E0B"},"children":"$$1,000 – $5,000"}]]}],["$","ul",null,{"style":{"listStyle":"none","padding":0,"margin":0,"display":"flex","flexDirection":"column","gap":"0.4rem"},"children":[["$","li","Cross-site scripting (XSS) in the web renderer",{"style":{"display":"flex","gap":"0.6rem","alignItems":"flex-start","fontSize":"0.87rem","color":"var(--muted)"},"children":[["$","span",null,{"style":{"color":"#F59E0B","flexShrink":0,"marginTop":2},"children":"•"}],"Cross-site scripting (XSS) in the web renderer"]}],"$L3","$L4","$L5"]}]]}],"$L6"]}],"$L7","$L8"]}]}]],["$L9"],"$La"]}],"isPartial":false,"staleTime":300,"varyParams":null,"buildId":"ixjD_XotqfWmK9a2n7H2W"} 3:["$","li","Transaction manipulation before signing",{"style":{"display":"flex","gap":"0.6rem","alignItems":"flex-start","fontSize":"0.87rem","color":"var(--muted)"},"children":[["$","span",null,{"style":{"color":"#F59E0B","flexShrink":0,"marginTop":2},"children":"•"}],"Transaction manipulation before signing"]}] 4:["$","li","Unauthorized access to read-only wallet data",{"style":{"display":"flex","gap":"0.6rem","alignItems":"flex-start","fontSize":"0.87rem","color":"var(--muted)"},"children":[["$","span",null,{"style":{"color":"#F59E0B","flexShrink":0,"marginTop":2},"children":"•"}],"Unauthorized access to read-only wallet data"]}] 5:["$","li","Bridge protocol state manipulation",{"style":{"display":"flex","gap":"0.6rem","alignItems":"flex-start","fontSize":"0.87rem","color":"var(--muted)"},"children":[["$","span",null,{"style":{"color":"#F59E0B","flexShrink":0,"marginTop":2},"children":"•"}],"Bridge protocol state manipulation"]}] 6:["$","div","Medium",{"className":"reveal reveal-delay-3","style":{"background":"rgba(59,130,246,0.06)","border":"1px solid rgba(59,130,246,0.2)","borderRadius":"var(--radius)","padding":"1.5rem"},"children":[["$","div",null,{"style":{"display":"flex","justifyContent":"space-between","alignItems":"center","marginBottom":"1rem","flexWrap":"wrap","gap":"0.5rem"},"children":[["$","div",null,{"style":{"display":"flex","alignItems":"center","gap":"0.75rem"},"children":["$","span",null,{"style":{"fontWeight":800,"fontSize":"1rem","color":"#3B82F6","background":"#3B82F618","padding":"4px 14px","borderRadius":20,"border":"1px solid #3B82F644"},"children":"Medium"}]}],["$","span",null,{"style":{"fontWeight":700,"fontSize":"1.1rem","color":"#3B82F6"},"children":"$$100 – $1,000"}]]}],["$","ul",null,{"style":{"listStyle":"none","padding":0,"margin":0,"display":"flex","flexDirection":"column","gap":"0.4rem"},"children":[["$","li","UI spoofing or misleading transaction details",{"style":{"display":"flex","gap":"0.6rem","alignItems":"flex-start","fontSize":"0.87rem","color":"var(--muted)"},"children":[["$","span",null,{"style":{"color":"#3B82F6","flexShrink":0,"marginTop":2},"children":"•"}],"UI spoofing or misleading transaction details"]}],["$","li","Denial of service in portfolio sync",{"style":{"display":"flex","gap":"0.6rem","alignItems":"flex-start","fontSize":"0.87rem","color":"var(--muted)"},"children":[["$","span",null,{"style":{"color":"#3B82F6","flexShrink":0,"marginTop":2},"children":"•"}],"Denial of service in portfolio sync"]}],["$","li","Incorrect NFT ownership attribution",{"style":{"display":"flex","gap":"0.6rem","alignItems":"flex-start","fontSize":"0.87rem","color":"var(--muted)"},"children":[["$","span",null,{"style":{"color":"#3B82F6","flexShrink":0,"marginTop":2},"children":"•"}],"Incorrect NFT ownership attribution"]}],["$","li","Information disclosure of non-sensitive data",{"style":{"display":"flex","gap":"0.6rem","alignItems":"flex-start","fontSize":"0.87rem","color":"var(--muted)"},"children":[["$","span",null,{"style":{"color":"#3B82F6","flexShrink":0,"marginTop":2},"children":"•"}],"Information disclosure of non-sensitive data"]}]]}]]}] 7:["$","div",null,{"style":{"display":"grid","gridTemplateColumns":"repeat(auto-fit, minmax(300px, 1fr))","gap":"1.25rem","marginBottom":"3rem"},"children":[["$","div",null,{"className":"reveal","style":{"border":"1px solid var(--border)","borderRadius":"var(--radius)","padding":"1.5rem"},"children":[["$","div",null,{"style":{"fontWeight":700,"color":"#059669","marginBottom":"1rem","display":"flex","alignItems":"center","gap":"0.5rem"},"children":[["$","span",null,{"children":"✓"}]," In Scope"]}],["$","ul",null,{"style":{"listStyle":"none","padding":0,"margin":0,"display":"flex","flexDirection":"column","gap":"0.5rem"},"children":[["$","li","Smart contracts: NFT bridge contracts (LayerZero, Wormhole adapters)",{"style":{"fontSize":"0.86rem","color":"var(--muted)","lineHeight":1.5},"children":"Smart contracts: NFT bridge contracts (LayerZero, Wormhole adapters)"}],["$","li","Desktop application core: wallet key management, encryption, local storage",{"style":{"fontSize":"0.86rem","color":"var(--muted)","lineHeight":1.5},"children":"Desktop application core: wallet key management, encryption, local storage"}],["$","li","Bridge protocol: quote generation, transaction signing flow",{"style":{"fontSize":"0.86rem","color":"var(--muted)","lineHeight":1.5},"children":"Bridge protocol: quote generation, transaction signing flow"}],["$","li","API endpoints: authentication, data validation, rate limiting",{"style":{"fontSize":"0.86rem","color":"var(--muted)","lineHeight":1.5},"children":"API endpoints: authentication, data validation, rate limiting"}]]}]]}],["$","div",null,{"className":"reveal","style":{"border":"1px solid var(--border)","borderRadius":"var(--radius)","padding":"1.5rem"},"children":[["$","div",null,{"style":{"fontWeight":700,"color":"#EF4444","marginBottom":"1rem","display":"flex","alignItems":"center","gap":"0.5rem"},"children":[["$","span",null,{"children":"✕"}]," Out of Scope"]}],["$","ul",null,{"style":{"listStyle":"none","padding":0,"margin":0,"display":"flex","flexDirection":"column","gap":"0.5rem"},"children":[["$","li","Social engineering attacks against NFT Wallet team or users",{"style":{"fontSize":"0.86rem","color":"var(--muted)","lineHeight":1.5},"children":"Social engineering attacks against NFT Wallet team or users"}],["$","li","Vulnerabilities in third-party dependencies (report to them directly)",{"style":{"fontSize":"0.86rem","color":"var(--muted)","lineHeight":1.5},"children":"Vulnerabilities in third-party dependencies (report to them directly)"}],["$","li","Issues already reported or being fixed (check our public tracker)",{"style":{"fontSize":"0.86rem","color":"var(--muted)","lineHeight":1.5},"children":"Issues already reported or being fixed (check our public tracker)"}],["$","li","Theoretical vulnerabilities without a working proof of concept",{"style":{"fontSize":"0.86rem","color":"var(--muted)","lineHeight":1.5},"children":"Theoretical vulnerabilities without a working proof of concept"}]]}]]}]]}] 8:["$","div",null,{"className":"reveal","style":{"textAlign":"center","padding":"2rem","background":"rgba(124,58,237,0.04)","border":"1px solid rgba(124,58,237,0.15)","borderRadius":"var(--radius)"},"children":[["$","h3",null,{"style":{"fontSize":"1.1rem","fontWeight":700,"marginBottom":"0.5rem"},"children":"Found a vulnerability?"}],["$","p",null,{"style":{"color":"var(--muted)","fontSize":"0.9rem","maxWidth":440,"margin":"0 auto 1.25rem"},"children":"Send a detailed report including steps to reproduce, impact assessment, and any proof-of-concept code. We respond within 48 hours."}],["$","a",null,{"href":"mailto:security@nftwallet.app","className":"btn-primary","style":{"display":"inline-flex","alignItems":"center","gap":"0.5rem"},"children":"Report to security@nftwallet.app →"}],["$","p",null,{"style":{"marginTop":"1rem","fontSize":"0.8rem","color":"var(--muted)"},"children":"Please allow up to 90 days before public disclosure."}]]}] 9:["$","script","script-0",{"src":"/_next/static/chunks/0eke3m7v16498.js","async":true}] a:["$","$Lb",null,{"children":["$","$c",null,{"name":"Next.MetadataOutlet","children":"$@d"}]}] d:null