Sign Up
Install Now

Bug Bounty Program

Help Secure Ultra. Get Rewarded.

Ultra is a next-gen gaming OS built to serve gamers, developers, and publishers alike. From wallet to marketplace, from chain to games and dApps, our ecosystem powers a growing global network of creators and players. Keeping it safe is a shared mission.

If you’re a security researcher or ethical hacker, this is your chance to make an impact. Submit any bugs or vulnerabilities you find. Your report could earn a reward.

💡 Program Snapshot

🎯 Scope: Wallet, APIs, Auth, Ultra Chain, Marketplace, dApps
💰 Top Reward: €2,000
🕒 Response Time: ≤ 2 business days
🔐 Safe Harbor: Yes, fully protected
🧑‍💻 Sandbox Testing: Available on request
👤 Contact: security@ultra.io

Why It Matters

Ultra is built with security at its core. With our wallet, marketplace, EVM chain, and suite of dApps, we power the future of digital ownership and play. But even the best tech needs scrutiny. Join us in making Ultra stronger.

Responsible Disclosure

We believe in coordinated disclosure. Act in good faith, follow the rules, and we won’t pursue legal action. We follow the industry’s Gold Standard Safe Harbor model.

What You Can Test (Scope)

✅ In-Scope

  • Ultra Wallet
  • Ultra EVM chain
  • Ultra Games and Marketplace clients
  • Ultra APIs (REST, WebSocket, RPC endpoints) + dApps (e.g., token bridge, NFT marketplace)
  • Authentication and account management systems

🚫 Out of Scope

  • Ultra marketing website
  • Third-party services (e.g., Discord, Zendesk)
  • Social engineering or phishing
  • Physical attacks, social engineering, spamming, or denial‑of‑service
  • Non‑security bugs (UI/UX, spelling)

Rules & Payouts

Follow these rules to stay eligible:

  • Don’t exploit the bug or access real user data.
  • Submit a clear PoC and impact.
  • Be 18+, pass KYC, and not from embargoed regions.

Rewards will be paid within 30 days after the vulnerability has been validated, provided KYC has been successfully completed.

How to Report

Email us at security@ultra.io (use our PGP key). Include:

  • Title, summary, and steps
  • Impact + suggested fix
  • Wallet address (Ultra Mainnet)

Recognition & Safe Harbor

Follow the rules and you’re protected. We won’t pursue legal action. Top researchers get:

  • 🏅 Hall of Fame shoutout
  • 🪙 NFT badge
  • 💎 “Ultra Security Champion” status for >€25K total rewards

Let’s make Ultra more secure, together.