Bug Bounty

We welcome vulnerability reports at info@beastables.xyz. A paid bug bounty programme, reward schedule and testing scope have not yet been published. Reporting an issue does not guarantee payment.

This page invites reports; it is not blanket authorisation to test or access systems. Obtain written scope and permission before conducting active security testing.

Report suspected flaws affecting Beastables-controlled services, such as access-control failures, exposure of sensitive data or unsafe transaction handling. Include the affected URL or feature and the potential impact.

Wallet providers, exchanges, blockchain infrastructure and other third-party services are outside our authority to authorise. Report issues in those services to their respective owners.

Use only accounts, wallets and data you own or have explicit permission to use. Use the smallest safe demonstration necessary; do not move real funds, access other users' records, damage data or disrupt availability.

Do not perform denial-of-service attacks, social engineering, credential attacks or automated high-volume scanning. Stop immediately if you encounter private data or an unexpected risk, and report what happened without further access.

Email info@beastables.xyz with the subject Security report. Describe the affected feature, prerequisites, expected and actual behaviour, safe reproduction steps and likely impact.

Include redacted screenshots or a minimal proof of concept where helpful. Never include recovery phrases, private keys, live credentials or unnecessary personal data. Ask for a suitable secure exchange method before sharing sensitive material.

Allow time for investigation and coordinate public disclosure so that users are not put at risk. Keep exploit details and any accidentally encountered information private while a report is being assessed.

Submitting a report does not create an entitlement to payment, a guaranteed resolution time or authorisation to conduct further testing. Any testing permission or reward arrangement must be agreed explicitly in writing.