Security
Responsible Disclosure Policy
Help keep the XRP Ledger community safe — and get rewarded for it.
What we ask of researchers
- Give us reasonable time to fix the issue before publishing it
- Make a good-faith effort not to leak or destroy GateHub user data
- Do not defraud GateHub users or GateHub while researching
In return, we promise not to bring legal action against researchers who follow these guidelines.
Rewardsfrom $100
Paid to your verified GateHub account. No maximum — higher payouts for severe or creative findings.
In scope
- XSS and CSRF
- Authentication bypass or privilege escalation
- Remote code execution
- Access to sensitive user information
- Accounting errors
Out of scope
- Denial of service
- Spamming
- Misconfigured SPF, DKIM or DMARC records
- Services not hosted or controlled by GateHub
How to disclose
Email security@gatehub.net with code that reproduces the issue, a detailed description and impact, your name/link for attribution (optional) and your GateHub wallet address for the payout. We recommend PGP for secure delivery.
Thank you
Dejan Lukan, Sahil Saif, Sandeep Singh, Salman Khan, Bogdan Calin, Črt Vavroš, Kalpesh Makwana, Rathod Sameer, Voleti Anil Kumar — thank you for keeping the XRP Ledger community safe.
Found a vulnerability?
Send the details to security@gatehub.net.