Disclaimer: Participation in this program does not guarantee a bounty award. Bybit reserves the right to modify or terminate this bounty program at its sole discretion. Participants must comply with all applicable laws and regulations. Any fraudulent or misleading claims will result in disqualification.

What is the LazarusBounty Program methodology and how does it benefit the community?

At Bybit, we value the proactive contributions of our community in maintaining a secure and transparent ecosystem. This bounty program is designed to reward those who assist in identifying and freezing illicit funds. Please carefully review the following terms and conditions. 

Are the LazarusBounty Program and Bybit Bug Bounty Program the same?

No, they are not the same bounty program. The LazarusBounty Program is designed for those who assist in identifying and freezing illicit funds, whereas the Bybit Bug Bounty Program is designed for those who notice and submit reports of vulnerabilities on Bybit. 

For more detailed information on Bybit Bug Bounty Program, please refer to this article.

How can you participate in the LazarusBounty Program?

You can participate in the LazarusBounty Program by following the steps below:

Step 1: Track the Illicit Funds

Collect as much information as possible about the illicit funds. This includes:

• On-chain data: Blockchain addresses, transaction IDs (TXIDs), and wallet details.

• Transaction details: Dates, amounts, and any associated platforms or services.

• Other leads: Any additional information that could help identify the source or destination of the funds.

Step 2: Connect your Wallet

To submit a Lead, you must first connect to a Bybit wallet or any other third-party wallet. You will receive a signature request sent to your wallet, confirm the signature and you can submit the lead. Next, submit the lead via the LazarusBounty page here. 

Step 3: Wait for Review

Our team will review your submission within 3-5 working days, and send you an update of rejection/approval.

Step 4: Receive the Bounty

If your information contributes to the recovery of the funds, you will receive the bounty once the funds are confirmed to be frozen.

What happens if my submission is similar to another user’s submission? 

Bybit will investigate both submissions and compare the submission time, whoever submitted first will get qualified to receive the bounty. 

What is the total bounty pool allocation?

The total bounty pool is equivalent to 10% of the total value of the recovered funds, and it is distributed as follows:

1. 5% to the entity that successfully froze the funds

2. 5% to the first reporter who provides verifiable evidence leading to both the freezing of the funds and the identification of the responsible entity.

What qualifies as “Evidence” for the bounty distribution?

“Evidence” refers to the eventual wallet address of the entity that carried out the fund freezing.

What type of wallet can I connect to?

You can connect to Bybit Wallet or any third-party wallet.

How is the value of frozen funds determined for the bounty calculation?

The value of frozen funds is calculated based on the hourly opening price on Bybit (UTC+8) at the exact hour the asset was frozen.

What happens if the reported token is not listed on Bybit?

If the reported token is not listed on Bybit, the bounty calculation will default to using the hourly opening price on CoinMarketCap as the reference.

I have submitted a valid lead, why did I not receive any bounty?

The bounty is awarded only if the lead successfully results in the freezing of funds. You can check the status of the reports and the est. bounty from the Verified Report page. 

When will I get an update on my submitted lead?

After the submission, you will only get an email update after rejection/approval, within 3-5 working days.

When will I get the bounty once it is confirmed frozen?

Once the funds are confirmed frozen, the bounty will be distributed in 3 working days.

What is Hack Address API?

The Hack Address API updates a black list of suspicious wallet addresses identified to allow ethical security experts to race against time to streamline and expedite their efforts in recovering the compromised funds.