Overview
Atomic plans an open bug bounty for security researchers. The program will cover the smart contracts, the trading engine, the lending pool and the production frontend, with reward bands scaled to demonstrated impact.
Final scope, severity bands and reward amounts will be published here before the program goes public. Until then, if you believe you've found a security issue, email info@atomic.green or DM a core contributor in the official Discord.
In the meantime
If you have a finding now, please disclose privately first. Don't publish or exploit anything until the team has had a chance to assess and patch.
Updates go out through the Atomic Discord and the changelog.