# DarkSwap responsible disclosure
Contact: mailto:support@darkswap.app
Contact: https://darkswap.app/security
Policy: https://darkswap.app/security
Canonical: https://darkswap.app/.well-known/security.txt
Expires: 2027-04-25T00:00:00Z
Preferred-Languages: en
# Bug bounty: open. US$25,000 total program budget.
# In scope: main site (darkswap.app), DarkSwap API, DarkPools. The launch site is not in scope.
# Does not qualify: third-party providers, social media posts, founder posts.
# Rewards: critical vulnerabilities up to US$20,000; other valid reports from US$500, case by case.
# Payment: USDC on Solana, within 30 days of confirmation.
# Response: DarkSwap replies once a report has been confirmed. See the policy for details.