In an announcement, the team detailed that the program covers issues related to the two categories:
- smart contracts and blockchain,
- website and apps.
Rewards for the first category will range from USD 1,000 to USD 1m, while rewards for the second category will be in the range of USD 50 to USD 15,000. The amount depends on the level of threat – ranging from low to critical.
“Sky Mavis is eager to work with the community to make sure that every researcher’s finding is rewarded fairly – based on the vulnerability’s impact on business and overall severity,” the team said, adding:
“To this end, it is possible that extraordinarily severe issues or those with extreme impact may be rewarded up to [USD] 1,000,000.”
The blockchain gaming studio added that it will pay rewards in Axie’s governance token AXS. Moreover, there will be a six-months vesting period with monthly unlocks for fatal bounties that command top awards, which is arguably due to avoid a major sell-off.