Yolorekt Vulnerability Disclosure

generated: '2026-07-21'
method: searched
probe: false
source: https://github.com/YOLOrekt
# YOLOrekt (a DeFi prediction-markets dApp on Polygon/Ethereum) runs its
# vulnerability-disclosure / bug-bounty program through public GitHub repos
# rather than a security.txt or a HackerOne/Bugcrowd listing. The primary
# yolorekt.finance domain no longer resolves (DNS ENOTFOUND on apex/www/docs),
# so a live /.well-known/security.txt probe is not possible; these GitHub
# bounty repos are the surviving disclosure surface.
policy:
- https://github.com/YOLOrekt/community-bug-bounty
- https://github.com/YOLOrekt/dual-issuance-bug-bounty
contact: []
programs:
- name: Community Bug Bounty (V1 contracts)
  url: https://github.com/YOLOrekt/community-bug-bounty
  scope: V1 smart contracts
  reward: crypto
- name: Dual-Issuance Bug Bounty
  url: https://github.com/YOLOrekt/dual-issuance-bug-bounty
  scope: ethereum-polygon synced dual-token issuance contracts
  reward: crypto
evidence:
- source: https://github.com/YOLOrekt/community-bug-bounty
  kind: github-bug-bounty
  note: 'repo description: "V1 contracts public bounty project"'
- source: https://github.com/YOLOrekt/dual-issuance-bug-bounty
  kind: github-bug-bounty
  note: 'repo description: "find a bug, get some crypto!"'