Attack surface
3 in-scope
github.com/zeta-chain/nodeurl· Criticalgithub.com/zeta-chain/go-tssurl· Critical— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for ZetaChain Blockchain Software.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
first indexed
16h ago · 3 in-scope assets
// only one snapshot on record — changes appear from the next ingest onward
{
"assetTypes": [
"blockchain"
],
"stage1Hash": "1013d462eb435367eaf6fc1ffcaca84497d25737ba84f63c2cd9d8b1abe88667",
"description": "\r\nZetaChain an EVM-compatible L1 blockchain that connects everything: Build interoperable dApps that span any chain including Bitcoin; access all chains from one place.\r\n\r\nThis bug bounty program focuses on the node software deployed to validators and RPC nodes. This code is responsible for network consensus, internal transactions, cross-chain transactions, staking, etc. \r\n\r\nCAVEATS\r\nVulnerabilities found in pre-release or experimental code, including the ZetaChain toolkit (https://github.com/zeta-chain/toolkit), are generally considered low severity as these are intended for development use only and not deployed in production. Valid reports for critical issues that demonstrate real exploitability in a production context may still be considered at our discretion.\r\n\r\nExploits that require a malicious observer/signer to be executed successfully are considered out of scope. \r\n\r\n",
"projectTypes": [
"L1/L2",
"Bridge"
]
}github.com/zeta-chain/tss-lib