Blog Post
Bithumb Global Users Can Benefit Through Bug Bounty Program and DeFi Functions
Adam Robertson • Nov 20, 2020
The difference between how secure and vulnerable your crypto investment is could be one bug away. Notwithstanding the significant investments that trading platforms undertake to fortify themselves, bugs could still prove to be their Achilles heel. As a deterrent, many seek the hacker community’s expertise to identify potential threats to their systems. They exploit this expertise through their bug bounty programs. Bithumb Global (BG) has one such plan, and this article provides its in-depth examination.
What is Bithumb Global?
Bithumb Global is a South Korean cryptocurrency exchange that is part of the Bithumb family. It positions itself as the gateway to global crypto transactions. It is rich in features making it the ideal platform to trade in. Its salient features include:
Diverse Market
Bithumb offers transactions in a wide variety of cryptos. Additionally, it has the following boards making up its market, diversifying the offerings its users can enjoy:
- The Main Market - It comprises mature and well-tested coins. Consequently, it is a low-risk market.
- GEM - Is a board consisting of newly launched coins requiring more testing. As such, there is an element of risk attendant to their trading.
- DeFi - Its a decentralized finance board. Again since most of the coins require testing, this board is risky too.
- ETF - This is the smart token board. The yield rate, similar to the traditional ETFs in finance, is pegged to an asset.
- Pow Coin - This board consists of audited projects with no pre-pow mechanisms.
Ability to Purchase Crypto In local Currency
Bithumb global accepts various payment methods. These include Visa, Mastercard, M-Pesa, PayPal, Google Pay Skrill, and many others.
Block deal
The users of Bithumb Global have the added advantage of enjoying joint liquidity resulting from the collaboration of Bithumb, Bithumb Singapore, and Bithumb global and their global partners.
Spot Trading
Bithumb Global incorporates a 24 hour 365 days bid and ask offer market. Settlements on the spot market are instantaneous.
Margin Trading
The users of Bithumb Global can use funds borrowed from the exchange to fund their trades/investments.
Bithumb Global Learning
BG provides a platform for educating its users about its products. It adopts a Q&A format to increase user knowledge while rewarding them with tokens.
BG Mining
BG mining is a stage for users to mine different coins. BG undertakes to source high-quality mining projects for its users.
BG Staking
BG allows its users to hold cryptos for rewards.
BG Staging
Users will get rewards for participating in projects debuting on its blockchain.
Bithumb Global Bug Bounty Program
Bithumb Global has a three-stage bug bounty program. Let us examine its workings.
The reporting stage
During this stage, the reporter records threat intelligence to SlowMist Zone under "Submit bug Bounty."
Processing Stage
The SlowMist Security team will confirm the threat intelligence report within one day of receiving it. Additionally, it will make a follow-up by evaluating the report end informing Bithumb Global about it. After that, the Bithumb Global technical team will deal with the problem within three working days. They will also communicate with the reporter when necessary to seek their assistance.
Repairing Stage
Bithumb Global business department will repair the problems identified and provide an update. The time frame for resolution varies with the severity and difficulty of fixing it. The expected time frame is 24 hours for critical and high-risk problems, three working days for medium risk problems, and up to 7 days for low-risk. Further, the repair time frame depends on individual cases.
From there, the reporter reviews if the problem has been solved. They, too, provide an update.
After confirming the resolution of issues raised, Bithumb Global will inform the SlowMist Security team of the same and provide the vulnerability score. Together these teams will issue the reward.
4 Types of Vulnerabilities that Bithumb Addresses
The following are the four types of vulnerabilities that big thumb global addresses:
Critical Vulnerabilities
These are exposures that occur in the core business system. They cause severe impact, gain access to the business system control, the staff core system management, and even control the ecosystem. They include:
- multiple access in the internal network
- Gain core backend super administrator access
- leak enterprise core data and cause severe impact
- Smart contract overflow and conditional competition vulnerability
High-risk Vulnerabilities
Vulnerabilities in this category include changing system access
- system SQL injection
- gain unauthorized access to sensitive information
- Arbitrary document reading
- XXE vulnerability
- unauthorized operations involving money
- logical design and process defects
- other vulnerabilities affecting users on a large scale
- leakage of source code
- permission to control defect in the smart contract
Medium-risk Vulnerabilities
Medium risk vulnerabilities are those that affect users by the interaction part.
- general unauthorized operations such as bypassing restrictions to modify user operations
- denial-of-service vulnerabilities
- exposures arising from the successful explosion of sensitive operations
- leakage of locally-stored sensitive authentication key information
Low-risk Vulnerabilities
These are low impact vulnerabilities. They include local denial-of-service vulnerabilities, problems arising from Android component permission exposure, general application access, etc.
Vulnerabilities not covered
The bounty program temporarily excludes the following vulnerabilities unless they cause serious business impact.
- Third-party application vulnerabilities
- zero-day vulnerabilities
- Low version browsers/platforms/plug-ins affecting a user
- theoretical issues
- DNS related issues
- server configuration problems
- account blasting
- missing HTTP security headers
- OPTIONS/TRACE/HTTP method enabled
The Reward Program
In conjunction with SlowMist Zone, BG will offer vulnerability level rewards as follows:
Rules Governing the Program
Participants in the Bithumb bug bounty program must adhere to the following regulations.
- Refrain from the use of automatic scanners and other actions creating a large number of traffic requests
- Avoid possible impacts or restrictions
- All testers must use their accounts
- A tester shouldn't abuse the Dos/Ddos vulnerabilities, social engineering attacks, spam, and phishing attacks.
- Bithumb will only pay for the highest level vulnerabilities for combined exploitable ones.
- Agree to non-disclosure of discovered vulnerabilities unless Bithumb Global permits that
Bithumb Global’s Support for DeFi
BG supports the DeFi sector. It augments Binance Smart Chain and its projects, thereby helping bring the DeFi experience to many the world over. Also, it accommodates debuting projects and enhances the DeFi experience through its derivatives trading and stacking mechanism. Its airdrops, multi-channel and multi-regional features make it suited for the sector. Finally, it will partner with other global projects to develop the Defi Ecosystem.
Final Thoughts
Bugs do make a difference in how robust a platform is. It follows that a platform riddled with bugs is susceptible to attacks. The reverse is true too. For these reasons, many crypto projects invest a great deal in discovering and eliminating bugs within their systems.
Bug bounty programs are their go-to vehicles. The crypto market abounds with them, and Bithumb Global is offering itself as the platform of choice. Its rich features and integration of the DeFi function raises its structure above the competition. Its users can look forward to fulfilling experiences wherever they’re in the globe.
Disclaimer: This is not trading or investment advice. The above article is for entertainment and education purposes only. None of the content on Crypto Folds is investment advice nor is it a replacement for advice from a certified financial planner. Please do your own research before purchasing or investing into any cryptocurrency.
The team at HarpyCoin proudly announces the launch of Phase 1 of their presale. This phase has already raised over $23,000 without any marketing efforts. With marketing campaigns starting now, HarpyCoin aims to reach $1.5 million. The Solana-based token boasts unique utilities, including staking, a DApp, and a swap feature. Learning More about the Project's Presale HarpyCoin's Phase 1 presale is live, attracting significant attention despite the absence of marketing. The project has raised over $23,000, with strong, genuine initial interest. With marketing efforts now in full swing, the team expects to reach over $1.5 million in funding. During the presale, HarpyCoin tokens are available at a discounted price starting at $0.002288. This special offer is only available during the presale period, making it the perfect time to secure HarpyCoin tokens. The presale opened on May 6 and will end on June 30. During each phase, participants can purchase tokens at a discounted price. Following the presale, HarpyCoin will go live on various cryptocurrency exchanges to provide liquidity and accessibility to the project. The team will announce exchange listings soon. Here's a breakdown of the presale phases: Phase 1: Price - $0.002288, Max Tokens - 59,000 Phase 2: Price - $0.002368, Max Tokens - 57,000 Phase 3: Price - $0.002647, Max Tokens - 51,000 Phase 4 (Final): Price - $0.002755, Max Tokens - 49,000 Listing Price: $0.003250 Utility and Features HarpyCoin stands out with its diverse utilities. Users can stake their tokens and earn appealing APYs. Staking with HarpyCoin offers regular APYs, which the team will announce once the feature becomes active. More details about the staking protocol will be available when the feature goes live. The project also offers a DApp and a swap feature, enhancing user experience. When HarpyCoin reaches a certain market cap, a surprise use case awaits. The team will launch a Crypto Fair Platform, allowing users to attend events like Token2049 virtually (online or in VR). Concerning the project's DApp, HarpyCoin introduces an advanced application and swap system. Built on the Solana network, the DApp leverages lightning-fast transaction speeds and low fees for top performance. Users can enjoy high-speed transactions without worrying about high costs. The DApp features an intuitive interface, ensuring ease of use for beginners and experienced traders. It supports non-custodial trading and offers robust security measures. Users can participate in liquidity pools, earning rewards by providing liquidity for trading pairs. HarpyCoin ensures a seamless and secure trading experience for all participants. About HarpyCoin HarpyCoin is a new project led by a dedicated team of crypto enthusiasts. The team has already successfully launched different crypto projects. With a wealth of knowledge and expertise, they bring transparency, integrity, and a commitment to delivering results. The team members are well-versed in understanding the complexities of the crypto space. By choosing the Solana network, this team wants to capitalize on its lightning-fast transaction speeds, low fees, and growing ecosystem. What drives the HarpyCoin team is a shared vision and determination to succeed. They believe in community-driven projects and fostering a vibrant, inclusive ecosystem. HarpyCoin stands out by adopting the majestic Harpy eagle as its symbol. The eagle embodies strength, power, and resilience, reflecting the project's vision. Unlike typical meme tokens, HarpyCoin aims to make a bold statement in the crypto world. Anyone interested can visit HarpyCoin's website to participate in the presale. Early investors will need to follow the instructions to complete a purchase and receive the tokens before the launch. Furthermore, the social media pages below will regularly share updates on the project with the HarpyCoin's community. X (Twitter) | Telegram | Medium
World of Dypians (WOD) - an immersive, groundbreaking MMORPG, has released its latest update, patch v0.2.4, on Epic Games. The team announced three new collaborations with major brands in the blockchain industry, Core DAO, Viction, and MultiversX. These visionary blockchain networks now have dedicated areas in the Downtown section of the WOD metaverse, where virtual and real-life experiences blend seamlessly. Furthermore, the new update reveals a host of exciting, upcoming features, including enhanced chain leaderboards, a new Challenger Global Leaderboard, an addition to the Daily Bonus, the Beta Pass NFT Collections, and a Premium Subscription with exclusive perks and benefits. This event marks an important milestone in the game's development. It includes new features and strategic partnerships that will improve the gaming experience, foster community engagement, and enable WOD to reshape the virtual world landscape. What’s New in the WOD Update Patch v0.2.4? The Downtown area in World of Dypians is a futuristic territory with limitless opportunities for exploration and discovery. Players can enjoy exciting adventures and unprecedented immersive gameplay here, where some of the industry's biggest names have their own dedicated areas. The update patch v0.2.4 brings three new prestigious guests, integrating CORE, VICTION, and MultiversX, enhancing WOD's leading MMORPG reputation. The three new areas in WOD feature new quests, advanced gameplay mechanics, and fantastical elements. They introduce players to state-of-the-art technologies unrivaled by other virtual worlds, building toward a truly unique gaming experience. The addition of the new partner areas plays a significant role in the other upcoming features of WOD: Enhanced Chain Leaderboards World of Dypians features specific leaderboards for each chain, including BNB Chain, SKALE, and the upcoming CORE, and Viction networks, enabling all players to compete in a league of their own. The new update will reward the users of each chain with STARS in the Daily Leaderboard. These STARS will improve the rankings in the Challenger Global Leaderboard, where the top 10 players with the most STARS win substantial rewards. However, the Weekly and Monthly leaderboards will not undergo this change. New Challenger Global Leaderboard World of Dypians challenges players to multiple quests and adventures, delivering considerable rewards in addition to fun and excitement. The most skilled and dedicated players will fight for the summit positions in the new Challenger Global Leaderboard. Their final rankings depend on the STARS they collect from chain leaderboards and other in-game activities. More importantly, the top 10 players will be celebrated and rewarded accordingly. Daily Bonus New Addition Premium subscribers now have the exciting opportunity to open 20 chests daily from each chain, including new partners Viction and CORE. This latest addition enhances the gameplay experience as players can now gain more exclusive rewards and items. The new partner chains will also provide unique rewards and personalized adventures for every user. Beta Pass NFT Collections One of the most anticipated features in WOD's already rich suite of offerings is the Beta Pass NFT Collections. These unique NFTs are specially designed for the in-game communities and will serve as tickets for the Treasure Hunt events in the virtual world. The new partners, Core, MultiversX, and VICTION, will offer exclusive rewards and experiences as part of releasing the Beta Pass NFT collections. For example, the Core DAO Beta Pass NFT Collection will give players exclusive access to the game and the Core DAO Treasure Hunt event. This 90-day-long adventure will allow players to gain a share of the $20,000 CORE reward pool. The game will open a free minting process for all users to get this NFT, ensuring every player can participate in the treasure hunt. Similarly, WOD will host a MultiversX Treasure Hunt event for MultiversX Beta Pass NFT holders, and free minting will be available. This treasure hunt lasts 90 days and features a $20,000 EGLD reward pool. Moreover, the MultiversX Wallet Integration allows users to connect with their wallets to mint these NFTs, unlocking their access to beta testing and special events. Premium Subscription World of Dypians allows users to access new and exciting rewards as part of an exclusive experience as premium subscribers. The upcoming premium subscription will be available for new partner chains Core and VICTION, unlocking additional features, rewards, and perks. The list of unique, personalized benefits for premium subscribers, including access to exclusive areas, quests, and items, is bound to increase as the game evolves. For instance, players can purchase a premium subscription on Core DAO and access exclusive benefits, such as early access to new content, special in-game items, and priority access to events. About World of Dypians World of Dypians (WOD) is an MMORPG designed by Dypius that features advanced AI, cutting-edge graphics, and immersive gameplay. The game takes place in a virtual world that abounds in engaging quests, brand-dedicated spaces, and must-play adventures. The new collaboration with Core DAO, Viction, and MultiversX proves WOD's constant rise in reputation and appeal within the increasingly competitive Web3 space. Each new partner area boasts exceptional challenges and thrilling adventures, inviting players to explore the rich World of Dypians and uncover its hidden secrets. This charming virtual world is now home to more diverse landscapes, new characters, and endless opportunities, confirming its industry-leading position and undisputable potential. World of Dypians has recently been on a streak of exceptional developments, including ranking #1 in the BNB Chain DAU Incentive Program . This initiative ranks the daily active unique wallet addresses interacting with the project's smart contracts. Moreover, WOD has been selected for BNB Chain's Airdrop Alliance Program, onboarding 41,524+ on-chain users in the first 14 days. The program seeks to connect top projects that have yet to issue tokens with the broad BNB Chain community. Its second campaign started only a few days ago, and World of Dypians has already boarded over 5,000 on-chain users. You can learn more about World of Dypians and stay up-to-date with its development at these links: Website | Twitter | Discord | Telegram | GitHub | YouTube | Download on Epic Games |
MAOCAT , the first cat-themed memecoin on Ethereum, has started its presale, offering over 60% of the $MAO token supply. In a rare feat, the project has already raised more than $300,000, earning the memecoin a standout reputation before its much-anticipated launch. MAOCAT is an up-and-coming project seeking to reshape the DeFi space and redefine NFT collecting. The self-proclaimed "first cat memecoin on Ethereum" is at its forefront as a disruptive force in a sector dominated by dog-themed and frog-themed projects. However, MAOCAT is more than a memecoin. The project has ambitious plans to develop an entire ecosystem, including staking functions, NFTs, an NFT marketplace, and various decentralized applications (dApps). Its growing list of future DeFi functions and applications will be available in the emerging Web3 landscape, offering users numerous opportunities at the dawn of the "era of cats." The ongoing presale for $MAO coins runs across 10 phases, allowing interested investors to purchase the token at a lower cost than its post-launch price. The latter may increase substantially, considering the project has already attracted considerable interest from memecoin enthusiasts and casual coin collectors. The team has put up for sale 60% of the 5 billion MAOCAT token supply spread across the 10 phases. The 1st Phase has already sold 66.27% of the 1,300,000 $MAO (+ 20% bonus), raising nearly 115 ETH. Crypto enthusiasts can easily purchase the token by connecting their wallets and paying with ETH for the desired amount of $MAO. Holding $MAO tokens gives users multiple benefits within the rapidly developing MAOCAT ecosystem. Firstly, they don’t have to pay Buy or Sell taxes on transactions. The only fees they will have to pay go toward marketing (3%), the liquidity pool (3%), and development (2%). Moreover, they can access rewards from staking, participate in the governance structure, and receive NFT token compensation. The presale for $MAO tokens ends in a little over 47 days, with the project burning any remaining unsold tokens. Early adopters have the chance to support an innovative project that has built a robust and loyal following from the beginning. About MAOCAT MAOCAT is an Ethereum-based, cat-themed memecoin aiming to make the feline a leading memecoin in a dog and frog-dominated memecoin landscape. The cat is probably the internet’s cult character, especially considering it is among the top-trending keywords in animal searches on Google. The MAOCAT project seeks to combine its popularity with a growing DeFi ecosystem full of lucrative opportunities for its users. MAOCAT plans to expand shortly, incorporating an exclusive collection of 10,000 MAOCAT NFTs tradeable in the in-house MAOCAT NFT Marketplace. Other features include a farming platform (MAOCAT SWAP) and play-to-earn MAOCAT games. The project will announce new features and developments within its ambitious roadmap soon. Currently, the team is focusing on the ongoing presale off to a successful start and quickly building a significant following. You can learn more about MAOCAT at these links: Website | X (Twitter) | Telegram ) | YouTube | Instagram
Wellchain , a revolutionary mobile super app that is changing healthcare coordination through artificial intelligence and blockchain technology, designed to simplify care coordination. This software as a service (SaaS) utilizes blockchain technology and offers a number of features such as telemedicine, team communications, remote monitoring, scheduling, alerts, reports, reminders and self-tasking functions. The app comes in two versions - one for caregivers and one for patients - both of which can be easily integrated on the backend. Among the innovations, I'd note the ability to quantify care by assigning a severity score to a patient and tracking their progress or deterioration with a Change of Condition Index. Wellchain believes that the future lies in decentralization, including a segmented Internet and file storage. The project is backed by one of the industry's leading startup platforms, NFPad.io, and has partnered with Unigrid.io's leading infrastructure engineers. Through the project's features, actionable information can be provided to healthcare providers, helping to improve resource allocation and institutional efficiency. The app is designed for patients, hospitals, and healthcare providers. Wellchain aims to reduce healthcare costs by improving care coordination and incentivizing patient compliance through gamification. Wellchain will save at least 15% of healthcare costs globally (equating to $1.2 trillion annually) and improve patient outcomes by 15%. The value of a Wellchain token is directly related to the production (success) of the company. If a company is successful, 10% of all tokens are burned, resulting in low supply and high demand. Token holders can also vote on important decisions including project funding, token utility expansion, and governance rules. Active membership in the community is rewarded with WELLCHAIN tokens through a giveaway, which is 5% of the tokens. Patients receive attractive incentives (paid by the payer) for adhering to a certain treatment plan, and still incentivizes patient compliance while promoting active community participation. The blockchain uses customized NFTs to easily and efficiently track compliance. NFTs are matched monthly with paper rewards based on the level of compliance. Wellchain has pioneered the use of NFTs as a revolutionary incentive mechanism. On the site, patients can gamify their journey by participating in contests and competitions using NFTs, incentivizing healthy habits and a sense of accomplishment. Patients are rewarded for active participation and adherence to treatment plans. These unique digital assets act as tangible proof of a patient's commitment to their health, which they can exchange for fiat money. By gamifying healthcare with NFT incentives, Wellchain not only motivates patients, but also establishes a direct link between compliance and valuable rewards. The team commits to: continuously improve the functionality and utility of the token, expand the appeal and utility of the token globally, and regularly disclose the progress of funded projects and their overall impact. The WELLCHAIN token is a native token of the Wellchain ecosystem, WELLCHAIN serves a dual purpose in the ecosystem, acting as both a utility token and a management token. This versatility of the WELLCHAIN token contributes to the smooth operation and growth of the Wellchain platform. Oh, and right now you can get a 50% discount before it's too late! This is an exclusive whitelisting bonus. To whitelist, send an email with your government-issued ID to the project. Pre-sale of the WELLCHAIN token has started and runs through the end of May. So with this project you can not only get rewards, but also be healthy to make even more money on the crypto market! With Wellchain you will have iron health and a big bank account! Website: https://www.wellchain.io Twitter: https://x.com/Wellchainhealth?t=jK4MkiazMiioFFg-9NxXHQ&s=09
NEVER MISS AN ARTICLE!
Sign up and stay up-to-date about what's happening at our site.
SUBSCRIBE TO OUR NEWSLETTER
Join the Newsletter
IMPORTANT DISCLAIMER: All content provided herein our website, hyperlinked sites, associated applications, forums, posts, social media accounts and other platforms or websites, is for your general information only, procured from third party sources. We make no warranties of any kind in relation to our content, including but not limited to accuracy and updates. No part of the content that we provide constitutes financial advice, legal advice or any other form of advice meant for your specific reliance for any purpose. Any use or reliance on our content is solely at your own risk and discretion. You should conduct your own research, review, analyze and verify our content before relying on them. Trading is a highly risky activity that can lead to major losses, please therefore consult your financial advisor before making any decision. No content on our Site is meant to be a solicitation or offer.