Jax.Money Bug Bounty

Details

The scope of the bug bounty program will include any code, UI or general functionality bugs and is limited to the types of bugs listed below (in detail).

The purpose of the bounty is to invite the community to conduct the security and functionality testing of the Jax.Money platform on the testnet.

Jax.Money is offering a reward prize for uncovering any flaws or bugs in security and supporting the development of a robust platform — Jax.Money.

When reporting vulnerabilities, please consider: 

1. attack scenario / exploitability, and
2. security impact of the bug.

Categories/Environment for testing:

1. Jax Wallet [Download] Only Android
2. Github code [Link]
3. End-to-end website testing [Link]

Fill out the participation form.

Prerequisites for testing

Create BSC testnet:

Connect Metamask > Under Network > Add network.

Enter in the BSC testnet details as follows:

• Network Name: BSC Testnet
• New RPC URL
• ChainID: 97
• Symbol: BNB
• Block Explorer URL
• Then press “Save”

Import tokens:

Faucet funds for the following tokens (WJAX, JAXUD, JAXRE, BUSD, WJXN, VRP)

You can receive tokens from the faucet here.

Make sure your wallet is connected and is running on the BSC test network.

Click on “Get Tokens” tab to add tokens to your wallet.

After this, token addresses and faucet funds will be automatically added to your wallet.

Note: This may take a minute or two to get faucet funds added to your wallet. Each user will receive 10,000 tokens (WJXN, WJAX, JAXUD, JAXRE and BUSD).

If tokens are not added to your wallet, try creating a new wallet and repeating the above steps in a separate tab.

OR

Step 1: Import tokens into your BEP-20-compatible wallet (eg: Metamask)

Step 2: Copy the token address and add to your wallet:

WJXN: 0x3A171b7C5d671e3C4Bb5823b8FD265F4E4e9a399

WJAX: 0x783f4A2EfAB4f34D6a0D88b71cf1FAc6d9B46FF0

JAXUD: 0xB8BDD95b52Ea5B815aAA214aeDB8d01Aed787157

JAXRE: 0xEc7D5848F88246cA6984b8019d08B8524793b062

BUSD: 0xa51BcDc792285598Ba7443c71D557e0B7Df6f991

VRP: 0x7EcaA5D422b91578899c0dEAD2891c127865c996

Levels

The bounty program has 3 levels for vulnerability resolution:

Participants can record the fields and the descriptions of the bugs (in the form provided). The team will internally categorize the bugs into the three categories mentioned above and rewards will be allocated accordingly. While participants can categorize the bugs according to what they feel is Low, Medium, Highly Critical.

But, the ultimate categorization will be at the discretion of the tech team and what they feel should be in the above categories.

Bounty related doubts: Everyone should raise your questions in this bounty Telegram group, NOT in the main chat.

Details for end-to-end website testing

To perform any kind of transaction please make sure that your wallet has some BNB test tokens. If you do not have them, please receive them from here.

Copy & Paste wallet address > Click on drop down “Give me BNB”. You should receive 1 BNB test token in your wallet.

Stake:

• BUSD (https://beta.jax.money/swap_busd.php)
  (50% WJAX | 50% BUSD)
• WJXN (https://beta.jax.money/swap_wjxn.php) — convert to VRP tokens
  i. Vote for a governor
• (https://beta.jax.money/dashboard.php)
  i. Deposit (function)
  ii. Unstake (function): (yield + unstaked amount)
  iii.Pending yield (function)
  iv. Harvest (function)

Swap: (https://beta.jax.money/swap_wjax.php)

• WJAX <-> BUSD, WJAX <-> JAXRE
• JAXUD <-> JAXRE, JAXUD <-> WJAX, JAXUD <-> BUSD
• JAXRE <-> JAXUD, JAXRE <-> WJAX, JAXRE <-> BUSD
• BUSD <-> JAXRE, BUSD <-> JAXUD

Transactions:

Sending and receiving transactions:

• $WJAX
• $JAXUD
• $JAXRE

For every transaction — transaction fees are collected. Here is the transaction fees split:

1. Transaction fee wallet* (capped value : eg 5 $WJAX): Cashback (10%), Referral (30%) — (70%, 10%, 10%, 10%)
2. DAO Tax (0.1%)
3. UBI Tax (0.1%)]

*Transaction fee wallet: (approx 60%-90%[without the referral fee added])

• Governor (10%)
• VRP (45%)
• LP yield (45%)

For any other steps like connecting a wallet or how to receive other tokens you can use the resources in the link below:

• General
• How to earn with Jax.Money
• Referral program
• How to swap
• How to get VRP tokens
• How to check yield

Bounty program rules:

1. Find a bug and if it is proven then $WJXN tokens will be rewarded.
2. Give your valuable suggestions, if implemented then $WJXN tokens will be rewarded.
3. The team will be checking the bugs on a weekly basis. The form can be filled anytime from Tuesday through Monday. Qualified bugs will receive bounty rewards in the following week on Mondays after the bug is reported.
4.  Filling up the form is required to participate in the bug bounty program.
5. Any suspicious activity or use of multiple accounts is strictly forbidden. If found, the account of that user will be suspended without any prior notice.
6. Jax.Network reserves the rights of any changes in payment of reward and terms & conditions of the bounty campaign.
7. Any kind of spam, insult or abusive comments are strictly prohibited.
8. Signing up on Jax.Network means the user agrees to the terms & conditions of all services of Jax.Network.
9. Kindly discuss any matters regarding the bounty only here.
10. When duplicates occur, we only award the first report that was received (provided that it can be fully reproduced).
11. All software within the scope of this program must be run in the testnet mode.
12. Testnet funds can be retrieved from the faucet at https://beta.jax.money/testfaucet.html
13. Social engineering (e.g. phishing etc) is prohibited.
14. Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our service.
15. Please provide detailed reports with reproducible steps. If the report is not detailed enough to reproduce the issue, the issue will not be eligible for a reward.

Links

• Application form
• Website
• Telegram
• Facebook
• Bounty TG group
• Twitter