For skilled hackers and security researchers to report vulnerabilities.
TAILWIND is audited by world-class security firms,
OtterSec, which audited LayerZero, Solana, Sei,
Aptos, Wormhole, and Oak Audit,
which audited
CosmosSDK, CosmWasm, Substrate, Solana, Near.However, there is always room to make the wallet safer, and we encourage
skilled hackers and security researchers to test the wallet,
incentivizing vulnerabilities discovered.Bug bounties are awarded
according to the criteria below:
Severity Level
Description
Award Prize
Critical / Catastrophic
A bug that allows an attacker to steal funds with minimal or without any user interaction
$10,000
Major
A bug that locks up funds or prevents users from accessing their funds, or allows an attacker to steal funds under rare, highly unlikely circumstances
$1,000
Under the unlikely scenario that a major or critical bug bypassed our audits,
please report any vulnerabilities discretely to bao@tailwind.zone.
{"docsConfig":{"$schema":"https://mintlify.com/docs.json","theme":"mint","name":"Docs","colors":{"primary":"#8000ff","light":"#962EFF","dark":"#8000ff"},"favicon":"/favicon.svg","logo":{"light":"https://mintcdn.com/tailwindsupport/cxc9uFyK1h-uGHZF/logo/light.svg?fit=max\u0026auto=format\u0026n=cxc9uFyK1h-uGHZF\u0026q=85\u0026s=56cab29bbf15d0ca0f221f34de101ace","dark":"https://mintcdn.com/tailwindsupport/cxc9uFyK1h-uGHZF/logo/dark.svg?fit=max\u0026auto=format\u0026n=cxc9uFyK1h-uGHZF\u0026q=85\u0026s=576204c7734e968ecd57193e38f3ab44"},"footer":{"socials":{"twitter":"https://twitter.com/TailwindZone","github":"https://github.com/tailwind-zone"}},"styling":{"latex":false},"navigation":{"global":{"anchors":[{"anchor":"Website","href":"https://tailwind.zone","icon":"building"},{"anchor":"Discord","href":"https://discord.com/invite/ATX4vuAxeR","icon":"discord"},{"anchor":"Twitter","href":"https://twitter.com/TailwindZone","icon":"twitter"}]},"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"tailwindsupport","hasAudioNarration":false,"actualSubdomain":"tailwindsupport","customDomains":["support.tailwind.zone"],"gitSource":{"type":"github","owner":"baotypes","repo":"documentation","deployBranch":"main","contentDirectory":"","isPrivate":false,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6a21a67d7829a9d7961b516b","collectionId":"e56475ba-dae8-49b8-9ef6-94a26d62e302","schemaVersion":"v2"},"entitlements":{},"buildId":"6a21a67d7829a9d7961b516b:success","clientVersion":"0.0.4044","searchFilterCounts":[{"language":"default","tag":"Bug Bounties","count":2},{"language":"default","tag":"Bug-Finding Incentives","count":2},{"language":"default","tag":"Documentation","count":2},{"language":"default","tag":"Get Started","count":2}]},"assistantConfig":{},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-updated-9-15","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"bug-bounties/whitehat","slug":"/bug-bounties/whitehat","pageMetadata":{"title":"Whitehat Security Bounties","description":"For skilled hackers and security researchers to report vulnerabilities.","href":"/bug-bounties/whitehat","hidden":false},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"For skilled hackers and security researchers to report vulnerabilities.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={a:`a`,code:`code`,p:`p`,tbody:`tbody`,td:`td`,th:`th`,thead:`thead`,tr:`tr`,..._provideComponents(),...props.components},{Table}=_components;if(!Table)_missingMdxReference(`Table`,true);return _jsxs(_Fragment,{children:[_jsxs(_components.p,{children:[`TAILWIND is audited by world-class security firms,\n`,_jsx(_components.a,{href:`https://osec.io/`,children:`OtterSec`}),`, which audited LayerZero, Solana, Sei,\nAptos, Wormhole, and `,_jsx(_components.a,{href:`https://www.oaksecurity.io/`,children:`Oak Audit`}),`,\nwhich audited\nCosmosSDK, CosmWasm, Substrate, Solana, Near.`]}),`\n`,_jsx(_components.p,{children:`However, there is always room to make the wallet safer, and we encourage\nskilled hackers and security researchers to test the wallet,\nincentivizing vulnerabilities discovered.`}),`\n`,_jsx(_components.p,{children:`Bug bounties are awarded\naccording to the criteria below:`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Severity Level`}),_jsx(_components.th,{children:`Description`}),_jsx(_components.th,{children:`Award Prize`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Critical / Catastrophic`}),_jsx(_components.td,{children:`A bug that allows an attacker to steal funds with minimal or without any user interaction`}),_jsx(_components.td,{\"data-numeric\":`true`,children:`$10,000`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Major`}),_jsx(_components.td,{children:`A bug that locks up funds or prevents users from accessing their funds, or allows an attacker to steal funds under rare, highly unlikely circumstances`}),_jsx(_components.td,{\"data-numeric\":`true`,children:`$1,000`})]})]})]}),`\n`,_jsxs(_components.p,{children:[`Under the unlikely scenario that a major or critical bug bypassed our audits,\nplease report any vulnerabilities discretely to `,_jsx(_components.code,{children:`bao@tailwind.zone`}),`.`]})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Whitehat Security Bounties","description":"For skilled hackers and security researchers to report vulnerabilities.","href":"/bug-bounties/whitehat","hidden":false}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":[],"subdomain":"tailwindsupport","siteName":"Docs","title":"Whitehat Security Bounties - Docs","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-01-07T02:41:27.173Z","originalFileLocation":"bug-bounties/whitehat.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"For skilled hackers and security researchers to report vulnerabilities.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Docs\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/tailwindsupport/xIKBzuXrRK3EeW3X/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/tailwindsupport/xIKBzuXrRK3EeW3X/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/tailwindsupport/xIKBzuXrRK3EeW3X/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/tailwindsupport/xIKBzuXrRK3EeW3X/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/tailwindsupport/xIKBzuXrRK3EeW3X/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/tailwindsupport/xIKBzuXrRK3EeW3X/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/tailwindsupport/xIKBzuXrRK3EeW3X/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/tailwindsupport/xIKBzuXrRK3EeW3X/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/tailwindsupport/xIKBzuXrRK3EeW3X/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Whitehat Security Bounties - Docs\">\u003cmeta data-mint-head property=\"og:description\" content=\"For skilled hackers and security researchers to report vulnerabilities.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Docs\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://support.tailwind.zone/bug-bounties/whitehat\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://tailwindsupport.mintlify.app/_mintlify/api/og/v2?division=Bug-Finding+Incentives\u0026amp;title=Whitehat+Security+Bounties\u0026amp;description=For+skilled+hackers+and+security+researchers+to+report+vulnerabilities.\u0026amp;theme=6760ae8662c9d8785be22173\u0026amp;signature=2d8470f546695b30aeaef7de9712d2db438df173e652b7f0f33c0e693d980a00\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Whitehat Security Bounties - Docs\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"For skilled hackers and security researchers to report vulnerabilities.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://tailwindsupport.mintlify.app/_mintlify/api/og/v2?division=Bug-Finding+Incentives\u0026amp;title=Whitehat+Security+Bounties\u0026amp;description=For+skilled+hackers+and+security+researchers+to+report+vulnerabilities.\u0026amp;theme=6760ae8662c9d8785be22173\u0026amp;signature=2d8470f546695b30aeaef7de9712d2db438df173e652b7f0f33c0e693d980a00\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/tailwindsupport/xIKBzuXrRK3EeW3X/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Docs\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#8000ff\">\u003clink data-mint-head rel=\"canonical\" href=\"https://support.tailwind.zone/bug-bounties/whitehat\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/bug-bounties/whitehat.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://support.tailwind.zone/#organization\",\"name\":\"Docs\",\"url\":\"https://support.tailwind.zone\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/tailwindsupport/cxc9uFyK1h-uGHZF/logo/light.svg?fit=max\u0026auto=format\u0026n=cxc9uFyK1h-uGHZF\u0026q=85\u0026s=56cab29bbf15d0ca0f221f34de101ace\"}},{\"@type\":\"WebSite\",\"@id\":\"https://support.tailwind.zone#website\",\"name\":\"Docs\",\"url\":\"https://support.tailwind.zone\",\"publisher\":{\"@id\":\"https://support.tailwind.zone/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://support.tailwind.zone/bug-bounties/whitehat#webpage\",\"url\":\"https://support.tailwind.zone/bug-bounties/whitehat\",\"name\":\"Whitehat Security Bounties\",\"description\":\"For skilled hackers and security researchers to report vulnerabilities.\",\"dateModified\":\"2026-01-07T02:41:27.173Z\",\"isPartOf\":{\"@id\":\"https://support.tailwind.zone#website\"},\"breadcrumb\":{\"@id\":\"https://support.tailwind.zone/bug-bounties/whitehat#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://support.tailwind.zone/bug-bounties/whitehat#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Bug-Finding Incentives\",\"item\":\"https://support.tailwind.zone/bug-bounties/intro\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Whitehat Security Bounties\",\"item\":\"https://support.tailwind.zone/bug-bounties/whitehat\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://support.tailwind.zone/bug-bounties/whitehat#article\",\"headline\":\"Whitehat Security Bounties\",\"name\":\"Whitehat Security Bounties\",\"description\":\"For skilled hackers and security researchers to report vulnerabilities.\",\"url\":\"https://support.tailwind.zone/bug-bounties/whitehat\",\"mainEntityOfPage\":{\"@id\":\"https://support.tailwind.zone/bug-bounties/whitehat#webpage\"},\"dateModified\":\"2026-01-07T02:41:27.173Z\",\"publisher\":{\"@id\":\"https://support.tailwind.zone/#organization\"},\"isPartOf\":{\"@id\":\"https://support.tailwind.zone#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Docs\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Docs","nav":{"global":{"anchors":[{"anchor":"Website","href":"https://tailwind.zone","icon":"building"},{"anchor":"Discord","href":"https://discord.com/invite/ATX4vuAxeR","icon":"discord"},{"anchor":"Twitter","href":"https://twitter.com/TailwindZone","icon":"twitter"}]},"tabs":[{"tab":"Documentation","pages":[{"title":"Documentation","href":"/intro"}]},{"tab":"Bug Bounties","groups":[{"group":"Bug-Finding Incentives","pages":[{"title":"UX Testing Bounties","description":"Incentivized testing for reporting bugs during testing or production.","href":"/bug-bounties/intro"},{"title":"Whitehat Security Bounties","href":"/bug-bounties/whitehat"}]}]}]},"basePath":"","title":"Whitehat Security Bounties - Docs","buildId":"dpl_DeHjVRGfFnhYQwHnfC2pjeXXv8h9","deploymentId":"dpl_DeHjVRGfFnhYQwHnfC2pjeXXv8h9","dynamics":[],"chunks":[]}