status-im/nimbus-eth2
2
0
Fork 0
mirror of https://github.com/status-im/nimbus-eth2.git synced 2025-01-28 23:34:59 +00:00
Code Issues Projects Releases Wiki Activity
nimbus-eth2/docs/the_nimbus_book/src/security_issues.md
Miran d1318fbe96
Doc fixes, part 2 (#4806) 
* part 2 of the initial doc fixes

- spelling fixes
- grammar fixes
- em-dashes should be em-dashes (`—`): double dashes (`--`) are not rendered properly
- reduce overusage of em-dashes, some of those should be separate sentences
- use the correct syntax for notes, tips and warnings
- every sentence is in a separate line (helps with future diffs)
- add missing dots at the end of list items
- fix some lists

* sentences on separate lines in the remaining files
2023-04-11 18:42:35 +03:00

993 B
Raw Blame History

Security related issues

For any security related issues, follow responsible disclosure standards. Do not file public issues.

Please file a report at the Ethereum bug bounty program in order to receive a reward for your findings.

When in doubt, please send an encrypted email to security@status.im and ask (gpg key).

Security related issues are (sufficient but not necessary criteria):

  • Soundness of protocols (consensus model, p2p protocols): consensus liveness and integrity.
  • Errors and failures in the cryptographic primitives
  • RCE vulnerabilities
  • Any issues causing consensus splits from the rest of the network
  • Denial of service (DOS) vectors
  • Broken Access Control
  • Memory Errors
  • Security Misconfiguration
  • Vulnerable Dependencies
  • Authentication Failures
  • Data Integrity Failures
  • Logging and Monitoring Vulnerabilities