Bounty Terms

Reference for bounty configuration options

BountyTerms Structure

struct BountyTerms {
    uint256 bountyPercentage;       // 0-100
    uint256 bountyCapUsd;           // Max per whitehat in USD
    bool retainable;                // Keep from recovered funds?
    IdentityRequirements identity;  // KYC level required
    string diligenceRequirements;   // For Named identity
    uint256 aggregateBountyCapUsd;  // Total cap across all whitehats
}

Fields

bountyPercentage

Percentage of recovered funds the whitehat receives.

• Range: 0-100
• Typical: 10%
• Note: Actual bounty is min(recovered × percentage, bountyCapUsd)

bountyCapUsd

Maximum bounty per whitehat in USD.

• Typical: $1M - $5M
• Note: Requires oracle conversion to token amounts

retainable

Whether whitehats keep bounty from recovered funds.

Value	Meaning
true	Whitehat keeps bounty, sends rest to recovery
false	Whitehat sends all to recovery, protocol pays separately

identity

Identity verification requirements.

enum IdentityRequirements {
    Anonymous,     // 0 - No verification
    Pseudonymous,  // 1 - Consistent pseudonym
    Named          // 2 - Legal name verification
}

diligenceRequirements

Additional requirements for Named identity. May specify KYC provider, documentation needed, etc.

aggregateBountyCapUsd

Total cap across all whitehats for a single exploit.

• Value 0: No aggregate cap
• Non-zero: Total payouts ≤ this value
• Note: Cannot use with retainable = true

Bounty Calculation

Individual Bounty = min(RecoveredValue × bountyPercentage%, bountyCapUsd)

If aggregateBountyCapUsd > 0:
  Total Payouts ≤ aggregateBountyCapUsd

Examples

Standard Terms

BountyTerms({
    bountyPercentage: 10,
    bountyCapUsd: 5_000_000,
    retainable: true,
    identity: IdentityRequirements.Anonymous,
    diligenceRequirements: "",
    aggregateBountyCapUsd: 0
})

High-Value Protocol

BountyTerms({
    bountyPercentage: 10,
    bountyCapUsd: 10_000_000,
    retainable: false,
    identity: IdentityRequirements.Named,
    diligenceRequirements: "Complete KYC via Persona",
    aggregateBountyCapUsd: 50_000_000
})

Validation Rules

• bountyPercentage cannot exceed 100
• aggregateBountyCapUsd cannot be used with retainable = true
• aggregateBountyCapUsd must be ≥ bountyCapUsd if non-zero