Tidal Bridge
LiveTrust-minimized cross-chain messaging and token bridge.
Rewards by severity
When you submit, the report is permanently bound to this version (fingerprint d36322ec2e…ff92). Scope, impacts, rewards, SLAs and policies can't be changed for your report later, even if Tidal Foundation publishes a new version.
Assets in scope
3 assets
| ID | Asset | Type | Target |
|---|---|---|---|
| TDL-1 | Bridge Router | Smart contractEthereum | 0x1111aAaA…5555eEeE |
| TDL-2 | Message Verifier | Smart contractEthereum | 0x6666fFfF…0000dDdD |
| TDL-3 | Token Escrow (Optimism) | Smart contractOptimism | 0xAbCd0000…00001234 |
Track record
Computed from case events. Projects can't edit these numbers.
Policies
The first report that identifies a root cause is eligible. Later reports sharing the same root cause are duplicates, even when they describe a different attack path, unless they demonstrate a materially higher impact.
Issues listed in published audits or recorded as known-issue commitments before the submission timestamp are ineligible. Commitments may be revealed during a dispute.
Public disclosure requires approval from both parties after the fix is deployed and verified. Default embargo: 30 days after fix.
Either decision may be escalated to an independent platform mediator within 7 days of the project's final decision. The mediator publishes a reasoned decision to both parties.
Rewards are paid in USDC within the payout SLA after retest passes or after a Won't Fix decision. A Won't Fix decision never cancels an earned reward. The amount equals the locked reward calculation.