Qfex · Vulnerability Disclosure

Qfex Vulnerability Disclosure

Vulnerability disclosure

Qfex publishes a vulnerability disclosure policy for reporting security issues. A dedicated security contact is published.

CompanyTradingExchangePerpetual FuturesMarket DataWebSocketFXCommoditiesEquitiesFinancial ServicesCLIFintechReal-time
Program:

Disclosure Policy

Policy
https://docs.qfex.com/legal/bug-bounty

Security Contact

Contact
bugbounty@qfex.com

Source

Vulnerability Disclosure

Raw ↑ 
generated: '2026-07-20'
method: searched
probe: true
source: https://docs.qfex.com/legal/bug-bounty
policy:
- https://docs.qfex.com/legal/bug-bounty
contact:
- bugbounty@qfex.com
program:
  type: bug-bounty
  coordinated_disclosure: true
  rewards_currency: BTC
  minimum_payout_usd: 500
  severity_ranges:
    low: $500-$1000
    medium: $2,500-$5,000
    high: $20,000-$50,000
  sla:
    acknowledge: 1 business day
    triage: 10 business days
    reward_payment: 14 business days
  in_scope:
  - www.qfex.com
  - api.qfex.com
  - http.qfex.com
  - restapi.qfex.com
  - trade.qfex.com
  - mds.qfex.com
  legal_safe_harbor: >-
    QFEX will not initiate legal action for good-faith research conducted under the
    policy (CFAA / DMCA / anti-hacking safe harbor language).
evidence:
- source: https://docs.qfex.com/legal/bug-bounty
  kind: bug-bounty-policy
  keywords: [responsible disclosure, bug bounty, coordinated vulnerability disclosure, bugbounty@qfex.com]