friend.tech launches a bug bounty program. Rewards will be distributed based on the severity of the disclosed defects and the assets at risk. The maximum reward is up to 1 million USDC. Risks are divided into four levels:
Critical: An issue that could affect many users and have serious reputational, legal, or financial implications. For example, permanently locking a contract or withdrawing money from all users;
High: Issues that affect individual users and, if exploited, could pose a moderate threat to the user's reputation, legal or financial risk;
Medium: The risk is relatively small and does not pose a threat to user funds;
Low/Informative: The issue does not pose an immediate threat, but is relevant to security best practices.