For those who like to look for potential flaws in online platforms and websites, there is an additional source of income. RevenueBot provides a chance to detect and report any bugs or weaknesses found in their system, with the added incentive of rewarding USDT for your efforts. If you happen to encounter any potential security issues, just contact a dedicated support team to take part in the Bug Bounty program.
What kind of reward is possible to get?
According to similar programs, the degree and complexity of the vulnerabilities detected determine the amount of reward you will receive. The bugs detected are divided into three subgroups:
The first subgroup includes bugs or vulnerabilities that affect an individual user or you personally, for example cross-site request forgery (CSRF) or manipulation of a user’s reputation.
The second subgroup includes bugs or vulnerabilities that impact a large number of users simultaneously, without targeting a specific user, such as stored cross-site scripting (XSS) that can have a significant impact or bypass authentication, providing access to changes in user data or personal information.
The third subgroup covers bugs or vulnerabilities that do not harm users, but can potentially harm the entire service, for example, server-side request forgery (SSRF), obtaining administrative access or disclosure of important information.
The classification of detected bug or vulnerability will determine the offered reward, but the basic 50 USDT are guaranteed
In which cases remuneration is not paid
Sometimes, despite your best efforts, you may find yourself in a situation where you have discovered a potential vulnerability and reported it to support, but have not received the promised reward. Here are some reasons why this can happen:
- You may not be the only one who has stumbled upon this bug or system vulnerability, and therefore monetary compensation may not be available.
- The support team may need to connect to the user’s personal computer to verify the reported bug.
- Addressing the vulnerabilities you have identified may require innovative or unconventional approaches, which can take a lot of time and effort.
- If a vulnerability requires jailbreaking or modification of devices and applications, it may not be rewarded because of the risk involved.
- Finally, if a vulnerability is found in an outdated version of the browser, it may not be worth investing resources into fixing it.
General rules about the Bug Bounty program
A thorough review of any vulnerability report can take up to two weeks.
An error report should include a full description of the process required to reproduce a detected system vulnerability.
The use of automated software or error detection tools is prohibited, and such reports will be considered unacceptable for consideration.
It is also necessary that users refrain from intentional actions that may damage the service or the information stored in it.
The Bug Bounty program provides an excellent opportunity to earn additional income while improving our service in partnership with you, thereby increasing its overall stability.
