How can I report a security vulnerability to ENS?
The ENS bug bounty program is designed to ensure the security and reliability of the ENS. Below is a guide on how to report a security vulnerability and manage follow-ups effectively.
Overview of the ENS Bug Bounty Program
The ENS bug bounty program is hosted exclusively on the Immunefi platform. Immunefi specializes in vulnerability reporting and disclosure, providing a secure and structured process for submitting bug reports. All submissions must be made through Immunefi, as ENS does not accept reports through any other channels.
More Information: docs.ens.domains/bugs#-bug-bounty-program
Steps to Report a Vulnerability
Visit the Immunefi Platform: Go to the official ENS bug bounty page on Immunefi to review the program details, including the scope and eligibility criteria.
Create an Account: If you do not already have an Immunefi account, sign up and complete any required verification processes.
Submit Your Report: Use the Immunefi platform to submit your vulnerability report. Ensure that your submission includes all necessary details to facilitate a thorough review.
Managing Follow-Ups
Once your report is submitted, you can track its status and manage follow-ups directly through the Immunefi platform. Immunefi provides tools for communication and updates regarding your submission.
Limitations of ENS Support
Please note that ENS support cannot assist with issues related to Immunefi accounts, such as account verification, KYC, payouts, or platform access. Any problems encountered on Immunefi must be resolved directly with their support team. By following these steps, you can ensure that your security vulnerability report is submitted and managed effectively through the ENS bug bounty program on Immunefi.