New Campaign Bcnex Bug Bounty Campaign
(starts from 11 June, 2019)

The Bcnex trading platform will officially GO live at the end of this July.
Bcnex always wants to bring the best experience to ALL users. To achieve this, we need help from the community to find out any security risks or loopholes in our system. We encourage the community to JOIN our Bcnex Bug bounty, and we will award anyone who submits any vulnerabilities via our bug bounty program.

Tasks:
Please describe the bug and how we can recreate it (if applicable). If possible, please provide screenshots, videos... with your submission to assist us with your description.
If you know how to fix the bug or a possible workaround, you will get a higher reward.

Submission form: https://forms.gle/75aoVF6rgRZgMsRN7

We will evaluate award sizes according to severity calculated based on the Common Vulnerability Scoring System (CVSS) v3 Standard Base Score which can be found here (https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator).

Reward: from 50 up to 5000 BCNX tokens (based on risk levels: Low, Medium, High, Critical)
Low: 50-200 BCNX
Medium: 200-500 BCNX
High: 500-1000 BCNX
Critical: 1000-5000 BCNX

# Eligible Vulnerabilities
We encourage the coordinated disclosure of the following eligible web application vulnerabilities:
- Server-side code execution
- Injection Vulnerabilities
- Cross-site scripting
- Authentication or authorization flaws
- Cross-site request forgery in a privileged context
- Directory Traversal
- Sensitive Information Disclosure
- Significant Security Misconfiguration

# Out-of-Scope Vulnerabilities
Certain vulnerabilities are considered out-of-scope for the Bug Bounty Program.

- Any physical attacks against Bcnex property or data centers
- Scanner output or scanner-generated reports, including any automated or active exploit tool
- Attacks involving payment fraud, theft, or malicious merchant accounts
- Man-in-the-Middle attacks...

Rules:
1. Bugs will be considered valid if they have not been submitted by another user before or BCNEX team is not aware about it.
2. Illegal or fraudulent submissions will not be acceptable.