Find Bugs. Get Rewarded.
Welcome To The Endless DomainsBug Bounty Program
Endless Domains invites you to find the bugs before anyone else does. Get hands-on access to our staging environment, a clear path through five guided phases, and rewards up to $500 based on what you uncover.
Program Timeline
Five Phases, OneContinuous Journey
Onboarding
Get invited, briefed on scope, and granted access to the staging environment.
Active Testing
Explore your assigned modules and log bugs as you find them.
Bi-Weekly Review
Every submission gets reviewed and severity gets validated every two weeks.
Reward Processing
Approved rewards go out first come, first served.
Program Wrap-Up
Final review, then a transition into ongoing opportunities for top testers.
Onboarding
Get invited, briefed on scope, and granted access to the staging environment.
Active Testing
Explore your assigned modules and log bugs as you find them.
Bi-Weekly Review
Every submission gets reviewed and severity gets validated every two weeks.
Reward Processing
Approved rewards go out first come, first served.
Program Wrap-Up
Final review, then a transition into ongoing opportunities for top testers.
Onboarding Steps
Getting Onboarded,Then Getting To Work
Tester expectations
- Remain active for the full duration of the testing window, with regular logins and submissions.
- Complete all assigned tasks within the timelines shared by the program team.
- Submit clear, reproducible bug reports using the standard reporting template.
- Check the shared bug and feedback sheet before submitting.
- Maintain confidentiality of the staging environment and pre-release materials.
*Testers who do not meet these expectations may be rotated out of the program to make room for others on the waitlist.
Private, Invite Only Community
Dedicated private community on Telegram, with briefings, updates, and direct access to the program team.
Staging Environment Access
Credentials to a staging environment kept fully separate from production.
Defined Testing Window
A fixed testing period communicated at kickoff, with all activity and rewards tracked.
Assigned Tasks
Specific modules or user flows to validate, ensuring even coverage across the platform.
Reporting, Review & Reward Structure
From Submission ToSeverity Based Payout
- 01
Open Bug And Feedback Sheet
Every submission is logged on a shared sheet visible to the entire tester community, so duplicate reports get caught before they happen.
- 02
Bug Review
The program team reviews all new submissions every two weeks, validating reproducibility and confirming severity.
- 03
First Come, First Served
Where multiple testers report the same issue, the reward goes to whoever submitted first and passed validation.
- 04
Feedback Loop
You get status updates on every submission: accepted, duplicate, needs more information, or not reproducible.
Low
Up to $15
Minor glitches and small inconsistencies that are hard to exploit in any meaningful way.
Medium
Up to $75
Weaknesses that need some existing access, or extra conditions, before they become useful to an attacker.
High
Up to $250
Serious issues affecting a key feature or exposing sensitive data, just short of platform wide impact.
Critical
Up to $500
Vulnerabilities that could compromise the platform at scale, expose user data broadly, or put funds at risk.
What's Next
The Journey Doesn't End,Here's What's Next
Testers who consistently deliver high quality, high impact reports are recognized publicly within the community and considered first for opportunities beyond the program, including:
Early Access
First look at new features and future product releases, ahead of the general public.
Paid Research Invitations
Invitations to paid research, usability studies, or advisory conversations.
Ambassador Consideration
Priority consideration for ambassador, affiliate, or community leadership roles.
Founding Tester Recognition
Public acknowledgment as founding testers once Endless Domains goes to public launch.
Frequentlyasked questions
Answers to your most common bug bounty program questions
The program is invite only. Selected testers are personally invited into a private community and granted credentials to the staging environment, kept fully separate from production.