Interactive previewDemo data only. Sign in as any example account and try anything. Resets nightly.Launching soon
BESCBESC ecosystem
Join
BountiesCompetitionsResearchersPricingResources
Sign inLaunch a program
All programs

Meridian DAO

LiveDisclosure program
by Meridian DAO

Governance portal and treasury dashboard for the Meridian ecosystem.

Web2 / SaaSTypeScriptEthereum
Rewards
Recognition
Unfunded
Submit report
OverviewScope2Impacts & severity4Rules & policiesTrack recordVersions1
Critical
$0
Fixed reward
High
$0
Fixed reward
Medium
$0
Fixed reward
Low
$0
Fixed reward

Impacts in scope

Once an impact is demonstrated, the severity follows mechanically. It can't be negotiated after the fact.

Critical
  • IMP-C1
    Account takeover or execution of arbitrary code on servers
    Must demonstrate: Demonstrated takeover of a victim account or RCE.
High
  • IMP-H1
    Access to sensitive data of other users
    Must demonstrate: Demonstrated read access to another user's private data.
Medium
  • IMP-M1
    State-changing action on behalf of another user
    Must demonstrate: Demonstrated CSRF/IDOR causing a state change.
Low
  • IMP-L1
    Information disclosure without direct user impact
    Must demonstrate: Exposure of non-sensitive internal details.