Featured on
Featured on
— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Chainlink.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 0,
"average_time_to_first_program_response": 527,
"average_time_to_report_resolved": null,
"handle": "chainlink",
"id": 0,
"managed_program": false,
"name": "Chainlink",
"offers_bounties": true,
"offers_swag": false,
"response_efficiency_percentage": 16,
"submission_state": "open",
"url": "https://hackerone.com/chainlink",
"website": "https://chain.link/",
"targets": {
"in_scope": [
{
"asset_identifier": "*.smartcontract.com",
"asset_type": "WILDCARD",
"availability_requirement": "none",
"confidentiality_requirement": "none",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "none",
"max_severity": "none"
},
{
"asset_identifier": "Faucets",
"asset_type": "OTHER",
"availability_requirement": "medium",
"confidentiality_requirement": "none",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Chainlink Testnet Faucet is available at the following URL: https://faucets.chain.link/\n",
"integrity_requirement": "low",
"max_severity": "high"
},
{
"asset_identifier": "chain.link",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "The focus of this program should be on the code residing on our Github repository. While reports on the domain and email are useful, we will no longer reward bounties for these reports.",
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "https://github.com/smartcontractkit/chainlink",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/smartcontractkit/chainlink-evm/tree/develop/contracts",
"asset_type": "SMART_CONTRACT",
"availability_requirement": "high",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/smartcontractkit/chainlink-solana/tree/develop/contracts",
"asset_type": "SMART_CONTRACT",
"availability_requirement": "high",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/smartcontractkit/external-adapters-js/",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "high"
},
{
"asset_identifier": "https://github.com/smartcontractkit/staking-v0.1/tree/master/contracts",
"asset_type": "SMART_CONTRACT",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
}
],
"out_of_scope": [
{
"asset_identifier": "Intercom",
"asset_type": "OTHER",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "Intercom is a 3rd party add-on and is not in scope.",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "blog.chain.link",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "chainlinklabs.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "The asset chainlinklabs.com is out of scope for this program.",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "create.smartcontract.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": "low",
"max_severity": "none"
},
{
"asset_identifier": "docs.chain.link",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "github.com/smartcontractkit/chainlink/contracts/src/*/dev",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "The contracts in the chainlink/contracts/src/*/dev directory are currently in development and not considered production-ready.",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "github.com/smartcontractkit/chainlink/examples",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "The Chainlink Examples directory contains tools and private keys in order to test the Chainlink client in an end-to-end, deterministic way. It contains private keys and passwords which are only for use in development.",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "https://github.com/smartcontractkit/chainlink",
"asset_type": "SMART_CONTRACT",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "none"
},
{
"asset_identifier": "https://github.com/smartcontractkit/chainlink-evm/tree/develop/contracts/.../dev",
"asset_type": "SMART_CONTRACT",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "https://github.com/smartcontractkit/chainlink-solana/tree/develop/contracts/.../dev",
"asset_type": "SMART_CONTRACT",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "https://github.com/smartcontractkit/chainlink/tree/master/contracts",
"asset_type": "SMART_CONTRACT",
"availability_requirement": "high",
"confidentiality_requirement": "low",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "none"
},
{
"asset_identifier": "https://github.com/smartcontractkit/chainlink/tree/master/core/internal",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "The internal directory contains tools and private keys in order to test the Chainlink client in an end-to-end, deterministic way. It contains private keys and passwords which are only for use in development.",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "https://github.com/smartcontractkit/chainlink/tree/master/core/sgx",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "The Chainlink SGX directory contains tools and private keys in order to test the Chainlink's SGX compatibility in an end-to-end, deterministic way. It contains private keys and passwords which are only for use in development.",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "https://github.com/smartcontractkit/chainlink/tree/master/integration",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "The Chainlink Integration directory contains tools and private keys in order to test the Chainlink client in an end-to-end, deterministic way. It contains private keys and passwords which are only for use in development.",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "https://github.com/smartcontractkit/chainlink/tree/master/tools",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "The Chainlink Tools directory contains tools and private keys in order to test the Chainlink client in an end-to-end, deterministic way. It contains private keys and passwords which are only for use in development.",
"integrity_requirement": null,
"max_severity": "none"
}
]
}
}Faucets· highIntercomgithub.com/smartcontractkit/chainlink/tree/master/core/sgxgithub.com/smartcontractkit/chainlink/tree/master/contracts