Skip to content

Latest commit

 

History

History
46 lines (24 loc) · 4.26 KB

SECURITY.md

File metadata and controls

46 lines (24 loc) · 4.26 KB

Security Policy

At Inverter Network, we are committed to ensuring the security and integrity of our protocol and smart contracts. We value the input of the community and security researchers in identifying and responsibly disclosing any potential vulnerabilities or security issues.

Reporting Security Issues

If you discover a potential security vulnerability or issue within our smart contracts or any part of the Inverter Network ecosystem, we strongly encourage you to report it promptly. Please email [email protected] with a detailed description of the issue, steps to reproduce it, and any relevant information that can assist us in understanding and resolving the problem.

We appreciate your efforts to disclose any security findings responsibly, and we are committed to collaborating with you to address the issue. Rest assured that you will be given proper credit for your contribution.

Responsible Disclosure

Please practice responsible disclosure when reporting security issues. We kindly request that you do not publicly disclose or discuss the vulnerability until we have had sufficient time to investigate and address it. Privately disclosing the issue to us via email allows us to work on a fix without putting our users' funds at risk.

We understand the importance of acknowledging and rewarding security researchers for their efforts. Even though our bug bounty program is currently set up, we assure you that you will not be unpaid for your valuable contributions. We are committed to fairly compensating those who help us improve the security of our platform.

Security Reviews and Audits

At Inverter Network, we prioritize the security of our smart contracts and follow a rigorous process of security reviews and audits:

  • Per our development and security guidelines, we require an external review for each pull request (PR) that goes from the dev branch to the main branch in our repository. We have partnered with Team Omega to conduct these security reviews directly in the PRs.

  • Additionally, prior to major releases, we perform a full audit of any changed contracts via an external auditing company before the deployment. This ensures that our contracts undergo thorough scrutiny by professional auditors.

  • Our version 1 has been audited by 0xMacro. The audit report will be published here once it becomes public. Furthermore, our v1 is currently undergoing a public audit competition on Hats Finance, leveraging the expertise of the broader security community.

We are committed to transparency and will make the results of our security reviews and audits available to the public, fostering trust and confidence in the security of our platform.

Security Guideline

At Inverter Network, we adhere to a comprehensive Security Guideline that outlines our best practices and approach to ensuring the security of our smart contracts. This guideline is a public document that we follow at all times. You can find our Security Guideline here.

We encourage you to review our Security Guideline to understand our commitment to security and the measures we have in place to protect our users and the integrity of our platform.

Bug Bounty Program

We are currently in the process of setting up a bug bounty program to incentivize and reward security researchers for their contributions. Further details about the program will be announced once it is officially launched. Stay tuned for updates on how you can participate and be rewarded for your efforts in strengthening the security of the Inverter Network.

Contact Us

If you have any questions, concerns, or feedback regarding the security of the Inverter Network, please don't hesitate to reach out to us at [email protected]. We value open communication and collaboration with the security community.


Disclaimer: This is experimental software and is provided on an "as is" and "as available" basis. We do not give any warranties and will not be liable for any loss incurred through any use of this codebase.