Bug Bounty Program
Help us improve EventTrader. Report bugs of all types and earn CYM token rewards.
🚀 How It Works
Reward Tiers
Rewards are paid in CYM tokens based on severity, impact, and quality of the report
Examples:
- Direct theft of user funds
- Complete platform outage
- Smart contract fund drainage
- Critical data loss or corruption
Examples:
- Trading functionality broken
- Major feature completely unusable
- Authentication or access issues
- Significant data display errors
Examples:
- Features not working correctly
- Performance issues affecting UX
- API returning incorrect data
- Confusing or broken user flows
Examples:
- UI/UX polish issues
- Typos and text errors
- Minor mobile compatibility issues
- Documentation inaccuracies
Token Vesting Schedule
CYM rewards are distributed with a vesting schedule to align long-term incentives
Example: 100,000 CYM Allocation
- At TGE: 25,000 CYM immediately claimable
- Month 1-6: ~12,500 CYM unlocks each month
- After 6 months: Full 100,000 CYM claimable
Vesting NFT
Receive a soulbound NFT representing your token allocation
Soulbound Token
Non-transferable until Token Generation Event (TGE) - prevents reward selling before launch
On-Chain SVG Art
Dynamic artwork generated on-chain based on your bug severity and earned badges
Achievement Badges
Earn badges like First Blood, Bug Slayer, Guardian, and White Hat Legend
Vesting Tracker
NFT metadata updates as you claim tokens - always shows current vesting status
My Allocations
Check your CYM token allocations and claim status
Connect Your Wallet
Connect your wallet to view your CYM token allocations and vesting NFTs
Or enter your wallet address to check allocations:
Smart Contracts
Verified on-chain contracts powering the bug bounty program
BugBountyVesting
Token vesting contract for CYM allocations with 25% TGE unlock and 6-month linear vesting
0xb693e3DffDe0a05C1dD509f7a5fff2358b1DC669
View on Basescan ↗
VestingNFT
Soulbound ERC-721 NFT contract with on-chain SVG generation and badge system
0x7D1925D9Ef50700283a7FF04f9D7AE686fa69da7
View on Basescan ↗
All contracts are upgradeable proxies (UUPS pattern) owned by the EventTrader treasury multisig. Contract source code is verified on Basescan.
Program Scope
In Scope
Smart Contracts
All deployed contracts on Ethereum and Base networks
Primary FocusWeb Application
cymetica.com - UI, UX, and functionality
API & Backend
REST API, data accuracy, error handling
Mobile Experience
Responsiveness and mobile compatibility
Performance
Speed, loading times, efficiency
Documentation
API docs, guides, and help content
Out of Scope
- Third-party services and integrations
- Subjective design preferences
- Feature requests (use our feedback form instead)
- Known issues already being worked on
- Issues in staging/test environments
- Spam or social media issues
- Browser-specific issues in unsupported browsers
- Issues requiring unlikely user interaction
Rules of Engagement
✅ Do
- Report bugs promptly and clearly
- Provide detailed reproduction steps
- Include screenshots or screen recordings
- Allow reasonable time for fixes
- Test on supported browsers/devices
❌ Don't
- Submit duplicate reports
- Report known or documented issues
- Submit feature requests as bugs
- Demand payment before disclosure
- Publicly disclose unresolved issues
🤝 Our Commitment
We appreciate all bug hunters who help improve our platform. Every valid report will be acknowledged, and we're committed to fixing issues quickly. We'll work with you throughout the process and ensure fair rewards for your contributions.
Reporting Process
Submit Report
Fill out the form below with all details
Acknowledgment
You'll receive confirmation within 48 hours
Initial Assessment
Our team evaluates severity and impact
Validation & Fix
We confirm and develop a fix
CYM Allocation
CYM tokens allocated with vesting
Claim Tokens
25% at TGE, 75% vests over 6 months
Submit a Bug Report
Please provide as much detail as possible to help us understand and reproduce the issue
Hall of Fame
Bug hunters who have helped make EventTrader better
Be the first bug hunter recognized!
Submit a valid bug report to appear here