how we sort the index, not an estimate of what you’ll earn
Attack surface
6 in-scope
rpc.drpc.testnet.arc.network· criticalrpc.testnet.arc.network· criticalgithub.com/circlefin/arc-node· criticalgithub.com/circlefin/arc-remote-signer· criticalgithub.com/circlefin/malachite· criticalcommunity.arc.iourlexplorer.arc.iourlhelp.arc.iourlfirst indexed
36d ago · 6 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Arc.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/arc-bbp",
"name": "Arc",
"handle": "arc-bbp",
"targets": {
"in_scope": [
{
"asset_type": "WILDCARD",
"instruction": "Eligible for Tier B bounty payouts. \n\nOnly for Circle-owned assets. ",
"max_severity": "critical",
"asset_identifier": "*.arc.io",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "high"
},
{
"asset_type": "SOURCE_CODE",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://github.com/circlefin/arc-node",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "SOURCE_CODE",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://github.com/circlefin/arc-remote-signer",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "SOURCE_CODE",
"instruction": "The repository containing the source-code for Malachite. Malachite is a Byzantine-fault tolerant (BFT) consensus engine implemented in Rust.\n \n==Partial scope only:==\nin scope is code/crates minus the starknet and test folders; everything outside code/crates is out of scope.",
"max_severity": "critical",
"asset_identifier": "https://github.com/circlefin/malachite",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "rpc.drpc.testnet.arc.network",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "rpc.testnet.arc.network",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
}
],
"out_of_scope": [
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "community.arc.io",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "explorer.arc.io",
"eligible_for_bounty": false,
"integrity_requirement": "not_defined",
"eligible_for_submission": false,
"availability_requirement": "not_defined",
"confidentiality_requirement": "not_defined"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "help.arc.io",
"eligible_for_bounty": false,
"integrity_requirement": "not_defined",
"eligible_for_submission": false,
"availability_requirement": "not_defined",
"confidentiality_requirement": "not_defined"
}
]
},
"website": "https://www.arc.io",
"offers_swag": false,
"managed_program": true,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 346,
"response_efficiency_percentage": 88,
"average_time_to_report_resolved": 326,
"average_time_to_first_program_response": 10
}