Bitflex Bug Bounty (WINNERS UPDATED)

Overview

We take security seriously. Our bug bounty program offers USDT rewards to anyone who discovers any bugs or vulnerabilities in our newly-launched Android app. 

Event Period 

Starts: 12:00:00 GMT+8, 20 December 2022

Ends: 11:59:59 GMT+8, 30 December 2022

Who is Eligible 

1. Not be one of our current or former employees, vendors, service providers, contractors, or employees of any of those vendors or contractors.
2. Not be subject to any international, national, or state-level sanctions.
3. Be at least 18 years of age or, if younger, submit your vulnerability with the consent of your parent or guardian.
4. Not exploit the vulnerability in any way, including by making it public or obtaining a profit.
5. Not engage in unlawful conduct when disclosing the bug, including through threats, demands, or other coercive tactics.

How it works

1. You must screen through the app and find any abnormalities on the new Bitflex native app, which will be available for Android phones on 20 December 2022.

2. Should you find any bugs or abnormalities, take a screenshot and report it to Bitflex via this digital form: Bitflex Bug Bounty Form.

3. A complete submission with screenshot(s) will be counted as one entry. You are allowed to submit multiple entries.

4. Once the event ends, all submissions will be evaluated by Bitflex’s internal panel. The 5 best bug reports will be chosen based on the following:

   1. Relevance

   2. Comprehensiveness (Detailed)

   3. Completion

Ineligible bounties
We don’t reward bounties for any vulnerabilities not under our direct control. For example:

1. Social engineering
2. Denial of Service
3. Usability issues

Rewards

Users of the five chosen reports will receive a 100 USD reward each.

Other terms 

1. The decisions made regarding rewards are final and binding.
2. By submitting your report, you grant the Company any rights, including intellectual property rights, needed to validate, mitigate, and disclose the vulnerability. 

3. Users are required to complete the report form to be counted as a complete entry. Incomplete forms will not be considered complete entries and will be discarded.

4. Reports must be completed in the English language only.

5. Any single user can submit multiple report entries and win multiple prizes in this event.

6. All winners will be announced on 5th January 2023 on our official social media pages and community channels.

7. The rewards will be distributed within 7 working days from the winner's announcement date.

8. Bitflex's decision as to those able to participate and the selection of winners is final. No correspondence relating to the competition will be entered into.

9. Bitflex shall have the right, at its sole discretion and at any time, to change or modify these terms and conditions; such change shall be effective immediately upon posting to the competition webpage.

10. Bitflex also reserves the right to cancel the competition if circumstances arise outside its control.

------------------------------------------------------------------------------------------------------

Winner Announcement

We are thrilled to announce the winners of our bug bounty contest. After careful consideration, we have chosen the top 5 bug reports which demonstrated the greatest relevance and thoroughness. We would like to express our heartfelt thanks to all participants for helping us to enhance the security of our system. Your contributions are invaluable and deeply appreciated.

For our iOS users, we understand that some of you may not have been able to participate due to the lack of an Android device. Please be assured that an iOS version of our app will be launched soon, and we have something special planned for our iOS users.

Once again, we extend our sincere gratitude to everyone who participated in the contest. We look forward to hosting more exciting events like this in the future.

Please check the winner list below:

Prize Distribution:
-The rewards will be distributed within 7 -14 working days from the winner's announcement date.

-The winner's account must complete FULL KYC to be eligible to receive the rewards.