TheSettlementLayerfortheMachineEconomy.

Security Program

Bug Bounty

Help secure the settlement layer for the machine economy. Responsible disclosure, tiered rewards.

Reward Tiers

Critical$10,000 - $50,000

Issues that could lead to loss of funds or protocol manipulation

High$5,000 - $10,000

Significant vulnerabilities affecting security or stability

Medium$1,000 - $5,000

Issues with limited impact or requiring specific conditions

Low$100 - $1,000

Minor issues or informational findings

In Scope

  • Paxeer core protocol logic (machineRFT consensus, Twin Turbo execution, EVM layer)
  • LayerX sequencer, batch settlement to L1, and the 402LXP payment flow
  • Wallet policy and capital enforcement
  • Smart wallet contracts (session keys, recovery, policy)
  • Service registry, escrow, and streaming payment contracts
  • Capacity underwriting contracts and slashing paths
  • Reference Agent SDKs (Python and TypeScript)

Out of Scope

  • Third-party services and integrations
  • Issues already reported or known
  • Attacks requiring compromised keys
  • Social engineering attacks
  • DoS attacks on infrastructure

Program Rules

  • • Report vulnerabilities via security@paxeer.app
  • • Do not exploit vulnerabilities beyond proof of concept
  • • Do not disclose issues publicly before resolution
  • • One reward per unique vulnerability
  • • First reporter receives the reward

Found a Vulnerability?

Submit your findings securely and help protect the Paxeer ecosystem.