- Top reward
- $5,000
- Top severity paid
- Critical
- Assets in scope
- 1
- Public CVEs
- 0
- Last change
- No changes yet
At a glance
What to know before you start testing.
- Pays up to $5,000
- for critical bugs.
- Report on HackenProof
- Submit through the program page.
- Replies within 3 days
- As the policy promises.
- Paid by HKN
- No identity requirement stated.
- Publish after a fix
- Coordinate the timing with the company.
Rewards
What HackenProof lists as the payout for each severity.
| Severity | Relative size | Reward |
|---|---|---|
| Critical |
|
$5,000 |
- Response
-
Within 3 days
First Response 3d
Summarised with AI from the program policy on HackenProof, read 12 Nov 2026, and checked word for word against it. Read the original
Scope
1 asset you may test.
Source code 1
- https://github.com/TTCECO/gttc
Rules
What the policy asks of you, and the bug types it won't reward, quoted from TTC | Protocol (via HackenProof)'s policy. "We" in these lines means the program, not this site.
While testing
-
Avoid compromising any personal data, interruption or degradation of any service .
-
Don’t access or modify other user data, localize all tests to your accounts.
-
Don’t exploit any DoS/DDoS vulnerabilities, social engineering attacks or spam.
-
In case you find chain vulnerabilities we pay only for vulnerability with the highest severity.
-
Only the first valid bug is eligible for reward.
-
Don’t disclose publicly any vulnerability until you are granted permission to do so.
-
Don’t break any law and stay in the defined scope.
-
Comply with the rules of the program.
Summarised with AI from the program policy on HackenProof, read 12 Nov 2026, and checked word for word against it. Read the original
Changes
Tracked since 11 Nov 2026. Last checked 46 minutes ago.
No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.
Public CVEs
Published vulnerabilities in this vendor's products, from the NVD.
No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.
Original policy
Copied from hackenproof.com on 12 Nov 2026. The summaries on this page are made from it; the live page may have changed since.
Bug bounty Triaged by HackenProof TTC | Protocol: Program info TTC | Protocol Company: TTC Scope Review: 282517 Submissions: 3 Total rewards: $2,183 Program left: 7 years ago Finished Submit report Contest is not active Program info Hackers 5 Reports 0 The TTC Protocol is a decentralized and token incentivized social networking protocol that aims to provide a brand new social experience for users all over the world. The TTC Protocol connects every participant in the TTC ecosystem by establishing common guidelines for different DAPPs. All Scope Focus Area Program Rules Scope Search targets In scope Target │ Type │ Severity Go TTC Copy https://github.com/TTCECO/gttc │ Web │ Critical Focus Area Documentation All necessary documentation is provided in README.md and /docs folder of the project. Note. You'll need Go 1.9x or 1.10x to deploy a node. TTC Wiki: https://github.com/TTCECO/gttc/wiki Block explorer can be found here https://www.ttc.eco/explorer In-Scope Vulnerabilities TTC accepts all reports that demonstrate vulnerabilities for the blockchain security and has real-life impact. Those reports are rewarded in accordance to the severity of the vulnerability. Some examples of security issues in scope of the program for TTC are listed below: DPOS consensus model and its realization TTC Node DenialOfService Network attacks Cryptography issues Account management flows Transactions forging Program Rules Avoid compromising any personal data, interruption or degradation of any service . Don’t access or modify other user data, localize all tests to your accounts. Don’t exploit any DoS/DDoS vulnerabilities, social engineering attacks or spam. In case you find chain vulnerabilities we pay only for vulnerability with the highest severity. Only the first valid bug is eligible for reward. Don’t disclose publicly any vulnerability until you are granted permission to do so. Don’t break any law and stay in the defined scope. Comply with the rules of the program. The rewards will be paid out in HKN based on the current price. Any details of found vulnerabilities must not be communicated to anyone who is not a HackenProof Team or an authorized employee of this Company without appropriate permission. Live since 13 Jun 2018 Last updated 25 May 2026 Range of bounty $600 - $5,000 Severity Critical $0 High $0 Medium $0 Low $0 blockchain @k3v142 1 te @testingforbugs 2 @talko 3 @j0ns1k 4 @oknemylk 5 Response type Business days First Response 3d Triage Time 3d Reward Time 5d Resolution Time 7d