Alpenglow is Solana's new consensus protocol. To mark its introduction to bug bounty eligibility, we're hosting a competition to catch standing issues that have evaded prior review. The code under test lives in anza-xyz/agave; submissions are filed through this portal as draft security advisories on anza-xyz/alpenglow, one finding per advisory.
Do not disclose a finding publicly: public findings are ineligible for a reward. See RULES.md for scope, severity categories, rewards, eligibility, and duplicate policy.
Sign-in binds this report's credit to your GitHub account and unlocks the form. No scopes are requested, only your public identity.
Sign in with GitHubYou can read the whole form below. It unlocks after sign-in.
You must accept the Terms & Conditions.
One finding per submission. Submissions with multiple findings will be closed.
Summary is required.
Please choose a category.
Select the affected component.
Select the affected release.
Submitting requires a one-time burn of … SOL on ….
The burn must be signed by, and funded from, this wallet.
A valid Solana wallet address is required.
Preparing your burn command…
A valid burn transaction signature is required.
Please confirm you have sent the burn.