Golem Security Program

A bug bounty for code that runs on a provider's machine, or decides what is allowed to run there.

Submissions open soon

Scope

yagna
Provider daemon
Runs on the provider's machine and enforces the provider's rules.
Repository
ya-runtime-vm
VM exe-unit
The sandbox: runs a requestor's workload inside a VM.
Repository
golem-certificate
Certificate verification
Verifies the certificates a provider's rules rely on to decide what a node may do.
Repository