Security
If you've found a security vulnerability in Soapbox software, please tell us privately so we can fix it before it's exploited. We pay bounties of up to $1,000 for critical issues.
Report a Vulnerability
Email the details to security@soapbox.pub. Please don't open a public issue or post about it until we've had a chance to fix it.
Email security@soapbox.pubBug Bounty
We pay bounties of up to $1,000 for critical security issues. The amount depends on the severity and impact of the issue. All bounties are paid in Bitcoin.
What to Include in Your Report
- The affected project and version, or the URL where you found it.
- A description of the issue and its impact.
- Steps to reproduce it, or a proof of concept.
- How you'd like to be credited, if at all.