Participate in Audit Contests
At Secure3, we have two types of contests: Open Contests and Intelligent Contests. Here’s how you can participate in each.
Participating in the Open Contest
All registered auditors will receive notifications when an Open Contest is live. Open Contests can be viewed at Secure3 Contests.
Auditors can participate and submit issues in open contests.
Participating in the Intelligent Contest
Certified Auditors will be invited to participate in the intelligent audit contest based on their preferences and performance track record.
Invited auditors have the option to accept or decline the contest invitation.
To learn more about out the auditors are selected for the intelligent contests, please read more on Auditor Matching.
Submitting Issues
Before submitting your issue, please review the submission policy.
How to submit your findings:
Go to the Audit Contest page
Click the Submit Issue button to submit your findings
Ensure you submit all findings before the contest deadline; the submission button will disappear after the deadline.
Do not submit your findings as issues in the code repo shared with you, as this will disclose your findings to other participants.
Always submit issues on the contest detail page on the Secure3 website to avoid losing your submission data.
Understanding Grading
All submissions will be initially reviewed by Secure3's internal security team and passed to the projects' engineering team for secondary review and verification.
The severity of the issue is assessed from two dimensions: the degree of damage and the difficulty of exploitation. Please refer to Severity Standard for more details.
The Secure3 team will honor client feedback and judgment, but will also maintain technical neutrality in the evaluation process.
Why We Grade Internally:
To ensure a speedy and consistent turnaround for both projects and auditors.
To more effectively and efficiently navigate through the technical debates, discussions, and consolidations.
Appeals Process
We invite all participants to review and assess our final contest grades. Should you have any concerns, we encourage you to submit appeals along with meaningful and constructive feedback whenever possible.
Appeal Submission: Once contest results are returned to auditors, the Create Appeal button will show up at the right of the submission page.
Appeal Limitations: You may appeal findings from other auditors, but each submission allows only one appeal opportunity. The final interpretation rests with Secure3.
Get Your Rewards
Once all the appeals have been resolved, the final rewards will be shared with participants and ready to distribute. We do rewards distribution in a monthly manner. At the beginning of each month, we will distribute rewards for all contests that are finalized.
For more details on rewards, please visit the Get Your Rewards.
Last updated