PAYEER Limited (hereinafter; our, us, we) values external security researchers and recognizes their importance on improving security of the services offered by us to stay up-to-date with the latest security techniques and technological developments. For this reason, we decided to implement a Bug Bounty Program (hereinafter; the Program), which aims to encourage security experts to share the security issues that they discovered within PAYEER Limited platform.
To participate in the program you must report the discovered bugs, exploits, or security issues, as per the instructions given in this section.
Provide identification information:
Provide information on security issue:
All reports must be submitted to Support Service on Contacts page.
To ensure fair grounds for rewarding the participating security experts, we decided to distribute the rewards based on the following criteria.
You are expected to abide the laws at all times, however, we also require you to adhere the following rules.
Scope. Vulnerabilities are accepted in the following areas:
If a vulnerability is found, we will reward you according to the level of criticality of the vulnerability found. Our rates are listed in the table below:
| Exploit Score | Reward |
|---|---|
| Critical | up to $10,000 |
| High | up to $1,000 |
| Medium | up to $500 |
| Low | up to $100 |
Vulnerability types:
Low: Minor vulnerabilities that do not directly affect security, but can be exploited in combination with other vulnerabilities.
Medium: Vulnerabilities that can lead to data compromise, but require complex conditions to exploit.
High: Vulnerabilities that can lead to serious consequences, such as data leakage or system disruption.
Critical: Vulnerabilities that can lead to complete control over the system or critical data leakage.
Information discovered related to our technology and information security are confidential and it should not be shared with any third-parties. Any information you receive or collect about PAYEER Limited and its services or any users that is part of the platform must be kept confidential and only used for reporting to participate in PAYEER Limited’s Bug Bounty Program.
PAYEER Limited does not make warrants of any kind, please keep in mind that you participate in this program on your own risk. We reserve the right to modify terms and conditions of this policy, and we may cancel this program at any time.
All reports must be submitted to Support Service on Contacts page.