Bug bounty
Help us keep DueWallet secure. Get rewarded.
We run a public bug bounty program for security researchers. Report vulnerabilities responsibly and earn up to $250,000.
Reward tiers
| Severity | Example | Reward |
|---|---|---|
| Critical | Remote extraction of private keys or seed phrase | Up to $250,000 |
| High | Unauthorized transaction signing | Up to $50,000 |
| Medium | Bypass of biometric or passcode lock | Up to $10,000 |
| Low | Information disclosure with limited impact | Up to $1,000 |
Program rules
- Report privately to security@duewallet.com with PGP encryption.
- Give us reasonable time to fix before public disclosure.
- Do not access or modify other users’ data.
- Do not perform denial-of-service or social engineering attacks.
- Only test against your own wallets and test networks.
- First valid report of a unique issue receives the reward.
Take full control of your crypto today.
Create a DueWallet in under a minute. No sign-up, no email, no KYC to get started. Just you and your keys.