OroPayBug bounty

Bug bounty

Found a bug? Get up to $100

  • $5–100 per bug
  • Paid in USDT to your OroPay balance
  • Usually within 3 days of confirmation

We pay $5 to $100 in USDT for bugs you find in OroPay: in the mini app, in the bot and on the website. The clearer your report is — with a screenshot or screen recording, the steps and what went wrong — the faster we can check it and pay.

Contents· 6

1.What counts as a bug

#

A bug is something that doesn’t work the way it was meant to and that can be reproduced:

  • a screen, button or feature doesn’t work, freezes or shows an error;
  • wrong amounts, rates, fees, balances or transaction history;
  • layout glitches: text that is cut off or overlaps, elements covering each other, a button you can’t see, the wrong language;
  • a notification or bot message that is the wrong one, goes to the wrong person or never arrives;
  • a vulnerability: you can see someone else’s data, bypass the PIN code or limits, or affect another person’s balance.

2.Rewards

#

Visual and text bugs

$5–10

A typo that changes the meaning, text that is cut off or overlaps, one button on top of another, the wrong language, a broken icon.

A feature, button or screen doesn’t work

$10–30

A button does nothing, a screen won’t open or freezes, search or a filter shows the wrong results, a notification doesn’t arrive.

Bugs with money, balance or calculations

$30–100

A wrong amount, rate or fee, a balance that is shown or calculated incorrectly, an operation that went through twice or didn’t appear in the history.

Vulnerabilities

up to $100, by agreement

Report them privately only, through the in-app form. Don’t exploit the vulnerability, don’t touch other people’s accounts or money, and don’t disclose it publicly until we’ve fixed it.

The team decides the exact amount. We consider how serious the bug is, how many people it affects and how clearly it is described.

3.Report requirements

#

For a report to be accepted:

  • a screenshot or screen recording is mandatory. A description alone, like “I opened the wallet and the balance didn’t show,” isn’t enough to find the bug, so we don’t review reports without attachments;
  • steps: what you did, in order — which screen you started from, what you tapped and typed;
  • what you expected to see and what actually happened;
  • the bug is reproducible — for you, or for us by following your steps;
  • you reported it first: the first clear report gets the reward, and duplicates don’t;
  • the bug isn’t already known to us: we aren’t fixing it right now and haven’t mentioned it in the news or in support replies.

The form collects your device details on its own — model, platform, Telegram version, screen size, language and theme. You don’t need to enter them.

4.What doesn’t count

#

No reward is given for:

  • suggestions about wording or design that aren’t a bug — “I don’t like the color,” “it would be better to phrase it differently”;
  • duplicates of bugs that are already known or already reported;
  • actions against other users, their accounts and money;
  • spam, mass reports of the same kind, and reports without a screenshot or video;
  • load attacks, brute-forcing of passwords and codes, automated scanning;
  • social engineering, phishing, attempts to deceive support staff;
  • bugs in third-party services — Telegram, blockchains, exchanges, banks — when the cause isn’t on our side.

If you find a bug that involves money, don’t repeat it for profit and don’t withdraw anything extra. Report it to us right away.

5.Payout

#

We credit the reward in USDT to your OroPay balance once we’ve confirmed the bug — usually within 3 days. We’ll tell you the decision and the amount in the same report, in support.

The program fund is $300 per month; once it runs out, reports are reviewed the following month. The OroPay team decides whether to give a reward and how much.

6.How to report

#
  1. Open @OroPayBot → “Settings” → “Report a bug”. Or send the bot the /bug command.
  2. Choose a section and describe step by step what you did, what you expected and what happened.
  3. Attach a screenshot or screen recording — up to 5 files: photos up to 10 MB, videos up to 50 MB.
  4. Confirm that you agree to these rules and submit. The reply will come in support — in the app and in the bot.

How to record your screen: on iPhone — Control Center → Screen Recording; on Android — quick settings → Screen record.

Found a bug? The sooner you report it, the better your chance of getting the reward.