Bug bounties on Arc - paid in USDC
Every report is bonded.Real bugs get paid.
Put down a small deposit with your report. Honest work gets it back, valid bugs earn the bounty on top, and slop forfeits it to the pool.
1
Bond your report
Link a private GitHub advisory and pay the pool's deposit.
2
Maintainer signs a verdict
Valid, honest mistake or slop. No answer before the deadline means automatic refund.
3
Withdraw
Claim your bond back, plus the bounty when the bug is valid.