Responsible disclosure
Security
Found a bug in the 30Min program, keeper or website? Please report it privately first.
How to report
Email the founder at [email protected]. Include the affected component, steps to reproduce, and the impact you expect. Encrypted mail via Proton is welcome.
In scope
- The on-chain program
4GwbSLkNSGSu4hCLYvxruqAVU25r9K1wedP3A4MBvaua: ticket accounting, draws, payouts, vaults and swaps - The keeper and indexer services
- This website, including the
/api/rpcproxy
Please
- Don't exploit an issue beyond what is needed to demonstrate it, and never against other players' funds.
- Give us reasonable time to fix it before disclosing publicly.
- Test on devnet where possible.