Vulnerability Disclosure Program
Responsible Disclosure
Security Team & Cryptographic Bounty Matrix
Security is the foundational thesis of Rohan Protocol. We welcome ethical security researchers to identify vulnerabilities in our WASM Prover, Semantic Firewall (V-01), DOM Sanitizer (V-07), or Midnight Compact Smart Contracts.
1. Primary Target Scope
| Target Layer | Security Vector | Max Severity Bounty |
|---|---|---|
| WASM RAM Prover Memory Leak | Vector V-02 (Witness Scrub) | $25,000 USD |
| Midnight Smart Contract Exploit | Contract: 6d2d6032... | $50,000 USD |
| Firewall Prompt Injection Bypass | Vector V-01 / V-07 | $10,000 USD |
2. Submission Protocol
Please submit full reproduction scripts and proof-of-concept (PoC) payloads directly to our security core team:
PGP Key Fingerprint:
8F3A B920 C41D 77E2 09A1 4410 DE92 FF81 33A7
Researcher Safe Harbor Commitment:
We will not pursue legal action against researchers who disclose bugs privately, avoid accessing customer data, and allow a reasonable 90-day remediation period prior to public disclosure.