Dash Digital Cash

  • $100 – $10,000 per vulnerability
  • Managed by Bugcrowd

Program stats

12 vulnerabilities rewarded

$5,000 average payout (last 3 months)

Latest hall of famers

Recently joined this program

Disclosure

Please note: This program does not allow disclosure. You may not release information about vulnerabilities found in this program to the public.

Dash is an experimental new digital currency that enables anonymous, instant payments to anyone, anywhere in the world. Dash uses peer-to-peer technology to operate with no central authority, managing transactions and issuing money are carried out collectively by the network.


This program adheres to the Bugcrowd Vulnerability Rating Taxonomy for the prioritization/rating of findings.

Reward Range

Last updated
Technical severity Reward range
p1 Critical $5,000 - $10,000
p2 Severe $1,000 - $5,000
p3 Moderate $500 - $1,000
p4 Low $100 - $500
P5 submissions do not receive any rewards for this program.

Targets

In scope

Target name Type
Dash Core Other
Dash Wallet Mobile Application for iOS iOS
Dash Wallet Mobile Application for Android Android

Out of scope

Target name Type
https://d-msg.com/ Website

Target Information

Dash Core

An open source software which enables the use of this currency and is the primary target of this bug bounty program located at https://github.com/dashpay/dash.

At this time focus should be placed on the version 12.2 branch of Dash Core: https://github.com/dashpay/dash/tree/v0.12.2.x

Access: There is a Dash testnet created specifically for software testing. Unlike mainnet, the DASH that exists on testnet has no real value, and since it's an entirely separate network, there is no risk to using the new and experimental software. The Dash team invites anybody who is interested to download the software and become active on testnet.

For more on the Dash testnet, visit:

Dash Wallet

Have your Dash always with you, in your pocket! You pay by quickly scanning a QR code. As a merchant, you receive payments reliably and instantly. Dash Wallet is the first mobile Dash app.

Access:
iOS: Here
Android: Here

Dash Messaging

For any issues found in Dash Messaging, please submit those against the Dash Messaging program found here: https://bugcrowd.com/dashmessaging

Out-of-Scope

Any issues that have been reported will be out-of-scope: https://github.com/dashpay/dash/issues
https://www.dash.org

Program rules

This program follows Bugcrowd’s standard disclosure terms.

This program does not offer financial or point-based rewards for P5 — Informational findings. Learn more about Bugcrowd’s VRT.