status-im/nimbus-eth2
2
0
Fork 0
mirror of https://github.com/status-im/nimbus-eth2.git synced 2025-01-22 20:42:13 +00:00
Code Issues Projects Releases Wiki Activity
nimbus-eth2/docs/the_nimbus_book/src/security_issues.md
0kok0 bb7662df3a
Security note (#3646)
2022-05-20 18:28:00 +03:00

1001 B
Raw Blame History

Security related issues

For any security related issues, follow responsible disclosure standards. Do not file public issues.

Please file a report at the ethereum bug bounty program in order to receive a reward for your findings.

When in doubt, please send an encrypted email to security@status.im and ask (gpg key).

Security related issues are (sufficient but not necessary criteria):

  • Soundness of protocols (consensus model, p2p protocols): consensus liveness and integrity.
  • Errors and failures in the cryptographic primitives
  • RCE vulnerabilities
  • Any issues causing consensus splits from the rest of the network
  • Denial of service (DOS) vectors
  • Broken Access Control
  • Memory Errors
  • Security Misconfiguration
  • Vulnerable Dependencies
  • Authentication Failures
  • Data Integrity Failures
  • Logging and Monitoring Vulnerabilities