> ## Documentation Index > Fetch the complete documentation index at: https://whalescorp.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Bounty program # What is a Bounty Program Ton Whales offers monetary rewards to security researchers who find and report issues in our smart contracts or staking system. To receive a reward, send a detailed report about the discovered vulnerability to [anton.bruilo@whalescorp.com](mailto:anton.bruilo@whalescorp.com). In the report, describe the essence of the problem, methods of exploitation, and the steps that led to its discovery. Public disclosure of vulnerability information disqualifies you from receiving a reward. # Vulnerability Categories ### Critical Vulnerability **Reward:** 15,000 TON\ **Description:** A vulnerability that could lead to substantial loss of funds by users or pool owners. Such vulnerabilities include: the possibility of unauthorized withdrawal of funds from smart contracts, bypassing staking security mechanisms, manipulation of user balances, critical errors in reward distribution logic, as well as any defects that allow attackers to gain control over other system participants' funds. ### Minor Vulnerability **Reward:** 500 TON\ **Description:** A vulnerability that will not lead to substantial loss of funds but may negatively affect system functionality. This includes: errors in data display, non-critical user interface failures, smart contract performance issues, minor violations in system logic that do not affect fund security, as well as vulnerabilities that may cause temporary inconvenience to users without financial consequences. # Payout Process If the vulnerability has not been discovered previously, a technical specialist will contact you to clarify questions related to the discovered vulnerability and reward payment. The reward is paid in currency at Ton Whales' discretion. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.