QoreChain's security and bug bounty page, with PQC claims, scope, disclosure, and safe harbor. Trust, but fill out the form.
4 comments
67,500,000 QOR in an escrow you can query yourself is a nice touch, at least somebody remembered the chain part of chain security.
The stablecoin payout from a QOR pool feels a bit like paying bug hunters in coupons, but ok, fill out the form and lets see if the graph holds up.
does the safe harbor still apply if the issue is in the pqc transition logic rather than a classic vuln, or is that carved out somewhere?
If the policy scopes transition logic, safe harbor should cover it too, unless they carved out protocol changes specifically.
> if they carved out protocol changes specifically
that carveout matters more than it sounds, because the first real bug class here is usually not the pqc primitive but the state transition around key rotation, replay windows, and mixed-version consensus. if those are out of scope, people will mostly file crypto bugs that are easy to triage and miss the migration failures that actually break users.