Security Hall of Fame
Maya2C is built by one developer. Security reports from people outside the project are how it gets safer, and this page names the people who sent them.
No cash rewards yet
Section titled “No cash rewards yet”There are no cash rewards yet. A bounty programme is planned, not live, and it depends on funding that does not exist today. No amount is promised here or anywhere else. When rewards are offered, this page and SECURITY.md will say so and say what they are.
Recognition is what there is for now: a line on this page, a badge, and credit in the published advisory.
Who is listed
Section titled “Who is listed”Nobody is listed yet.
Entries appear here only after the report has been fixed or judged not to be a problem, and only with the reporter’s consent. Nothing is added from a scanner’s output alone.
How to report
Section titled “How to report”Report privately, never in a public issue:
- Open private vulnerability reporting.
- Include what you found, how to reproduce it, and the commit you tested.
- Read the response targets and the rules of engagement in SECURITY.md.
Testing is for your own local devnet or the public testnet only. Do not test against anyone else’s funds or accounts.
Reporters of a valid finding can claim the security finder badge on the Contributors & badges page.