CoW Protocol

01Severity & Rewards

02Program Rules

1. 01Proof of Concept is required for all submissions. Reports without a working PoC demonstrating the vulnerability will not be considered.
2. 02KYC is not required for this program. Pseudonymous submissions are accepted.
3. 03Only previously unreported vulnerabilities are eligible. Duplicate submissions will be closed.
4. 04Vulnerabilities must be reported through the WhiteClaws platform. Public disclosure before resolution disqualifies the submission.
5. 05Testing must not disrupt live protocol operations. Use mainnet forks or testnets for Proof of Concept execution.
6. 06For Critical severity findings, the security team may arrange direct communication for expedited resolution.