> For the complete documentation index, see [llms.txt](https://docs.euphoria.finance/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.euphoria.finance/euphoria/bug-bounty.md).

# Bug Bounty

Euphoria rewards security researchers who help keep the platform safe.

#### How to Report

Email [**security@euphoria.finance**](mailto:security@euphoria.finance) with a clear description of the vulnerability, reproduction steps, and your assessment of the impact. We aim to acknowledge reports within 48 hours.

#### Rewards

Rewards are paid in USDM and scale with severity, impact, and report quality. Final amounts are at Euphoria's discretion.

#### Scope

In scope: Euphoria smart contracts, the web app, mobile PWA, Telegram mini app, and API.

Out of scope: third-party services, testnet environments, social engineering, and denial-of-service attacks.

#### Disclosure

Do not disclose vulnerabilities publicly before a fix is deployed, and do not exploit them beyond what is necessary to demonstrate impact. Researchers acting in good faith under this policy will not face legal action from Euphoria.