Squads · Vulnerability Disclosure

Squads Vulnerability Disclosure

Vulnerability disclosure

Squads publishes a vulnerability disclosure policy for reporting security issues. A dedicated security contact is published.

CompanyInfrastructureBlockchainSolanaMultisigSmart AccountsStablecoinsPaymentsWalletWeb3
Program:

Disclosure Policy

Policy
https://docs.squads.so/main/security/bug-bounty.md

Security Contact

Contact
security@sqds.io

Source

Vulnerability Disclosure

squads-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-21'
method: searched
probe: false
source: https://docs.squads.so/main/security/bug-bounty.md
program:
  type: perpetual-bug-bounty
  submission: security@sqds.io
  managed_via: email + GitHub Security Advisories
  max_reward: "$300,000 (locked SOL, 12-month lock)"
  tiers:
    - {impact: steal-funds, reward: "$300,000"}
    - {impact: freeze-or-availability-loss, reward: "$200,000"}
    - {impact: replay-attacks, reward: "$25,000"}
    - {impact: settings-modifications, reward: "$10,000"}
  scope_in:
    - Squads Protocol v4 program (SQDS4ep65T869zMMBKyuUq6aD6EgTu8psMjkvj52pCf)
    - Squads Protocol v3 program (SMPLecH534NA9acpos4G6x7uf3LWbCAwZQE9e8ZekMu)
policy: [https://docs.squads.so/main/security/bug-bounty.md]
contact: [security@sqds.io]
evidence:
  - {source: https://docs.squads.so/main/security/bug-bounty.md, kind: bug-bounty-policy}