Ɛha, wobɛhunu nhyehyɛeɛ ne mmara a ɛfa yɛn Bug Bounty Program Participants ho pɔtee. Ɛsɛ sɛ wokenkan saa nhyehyɛeɛ yi ka General Terms for Business Partners (“General Terms”) ho. Nsɛmfua biara a wɔakyerɛ aseɛ a wɔde adi dwuma wɔ saa Bug Bounty Program Terms yi mu no bɛfa ntease a wɔde ama wɔn wɔ General Terms no mu no.
1. Nnianimu
1.1. Saa nhyehyɛeɛ yi fa wo pɛ ara wo ara wo pɛ a wobɛfa wo ho ahyɛ Deriv bug bounty program no mu, deɛ ɛma wɔn a wɔfa mu nya akatua sɛ wɔbɛhwehwɛ na wɔbɔ amaneɛ wɔ mfomsoɔ anaa bugs a ɛwɔ Deriv software system anaa networks mu, na wɔnya sika mfasoɔ sɛ akatua (“Program”). Sɛ wobɔ amaneɛ ma yɛn fa mfomsoɔ a ɛfa Deriv-owned web services bi ho, anaasɛ wofa ɛkwan foforɔ so hyɛ Program no mu a, wokyerɛ sɛ woakenkan na wopene saa nhyehyɛeɛ yi so.
1.2. Wogye tom sɛ Program yi nnyɛ akansie, na mmom ɛyɛ ɔsɔdie ne akatua program a wɔyɛ no sɛdeɛ wɔpɛ.
2. Nhyehyɛeɛ no ntrasoɔ
2.1. Wɔakyerɛkyerɛ Program no ntrasoɔ mu nsɛm nyinaa wɔ Program webpage no so. Sɛ wonte aseɛ sɛ asɛm bi hyɛ Program yi ntrasoɔ ase anaa a, mena email kɔ security@deriv.com so hwɛ ansa na woabɔ mmɔden biara a wode sɔ hwɛ.
3. Wɔn a wɔfata sɛ wɔka ho
3.1. Wontumi nka Program yi ho sɛ:
3.1.1. Wo adwumakuo anaa kuo a wo yɛ adwuma ma wɔ no mma wo kwan sɛ woka saa program ahodoɔ yi ho;
3.1.2. Woyɛ adwuma anaa wayɛ adwuma dada ama yɛn anaa yɛn kuo biara mufoɔ afoforɔ;
3.1.3. Woyɛ abusuafoɔ a wɔbɛn adwumayɛfoɔ anaa adwumayɛfoɔ dada bi a wɔyɛ yɛn anaa yɛn kuo biara mufoɔ afoforɔ dea.
3.2. Sɛ yɛhu anaasɛ yɛwɔ nteaseɛ bi sɛ wohyɛ nsɛmfua a edi aseɛ wɔ soro no mu bi mu a, yɛwɔ ho kwan sɛ yɛma woanni Program no ho mfasoɔ bio, na yɛsane sika a wɔatua wo biara.
4. Mfasoɔ a ɛbɛtumi aba
4.1. Yɛwɔ ho kwan sɛ yɛsi gyinaeɛ sɛ asiane amanneɛbɔ a wɔde abrɛ yɛn no fata akatua anaa. Gyinaeɛ a wɔbɛsi sɛ wɔbɛtua akatua anaasɛ wɔrentua no, yɛn ara na yɛsi.
4.2. Yɛn gyinaeɛ a yɛsi fa bounty no dodoɔ ho yɛ deɛ ɛtwa toɔ.
4.3. Bounty dodoɔ a wɔde bɛma no gyina sɛdeɛ wɔakyekyɛ data a asiane no aka ne ne ho hia, ɔkwan a ɛbɛyɛ mmerɛ sɛ wɔde bɛdi dwuma, ne asiane kɛseɛ a ɛda yɛn asomdwoeɛfoɔ ne brand no so, sɛ yɛn Security team no hu sɛ asiane a wɔabɔ ho amaneɛ no yɛ security asɛm a ɛyɛ nokorɛ a.
5. Nsɛm a ɛho hia ansa na woayi Bug akɔma
5.1. Ɛsɛ sɛ nsɛm a wode brɛ yɛn no di saa akwankyerɛ a ɛwɔ aseɛ yi akyi:
5.1.1. Ka asiane no mu nsɛm nyinaa kyerɛ, a exploitability ne nkɛntɛnso ka ho.
5.1.2. Fa nsɛm ne nkyerɛaseɛ a ɛkyerɛ anammɔn biara a ɛho hia sɛ wɔyɛ bio ma nsɛm a wode brɛ yɛn no, a ebia ɛbɛtumi aka:
5.1.2.1. Videos;
5.1.2.2. Screenshots;
5.1.2.3. Exploit code;
5.1.2.4. Akɔneaba nkrataa;
5.1.2.5. Web/API abisa ne mmuaeɛ;
5.1.2.6. Email address anaa akɔntaa sɔhwɛ biara so user ID; ne/anaasɛ
5.1.2.7. IP address a wɔde dii dwuma wɔ sɔhwɛ no mu.
5.2. Sɛ woamfa nneɛma a ɛkã atifi hɔ no bi anka ho a, ebia ɛbɛtwentwɛn anaasɛ ɛbɛsɛe bounty sika a wɔtua no.
6. Nsɛm a emu yɛ den a wɔbɔ ho amaneɛ
6.1. Wopene so sɛ wo ne obi renkasa asiane a wɔahunu (sɛ wɔasiesie bi mpo a) wɔ Program no akyi kwan bi so a yɛn kwan so pɛfee nni ho.
6.2. Wohyɛ bɔ sɛ wobɛdi Deriv akwankyerɛ a ɛfa nsɛm a wɔbɔ ho amaneɛ ho so. Sɛ wogye di sɛ woahunu security asiane bi a, yɛsrɛ wo bɔ ho amaneɛ na kyerɛkyerɛ asiane no mu yie sɛdeɛ akwankyerɛ a wɔaka ho asɛm wɔ Clause 5 a ɛwɔ atifi hɔ no kyerɛ no.
7. Tumi Krataa (Licence)
7.1. Wode saa krataa yi ma yɛn kwan a wontua ho sika, a wɔatua no akyinsini, a ɛnni awieeɛ, a wɔrentumi nntwa mu, a emu nni obiara foforɔ a ɔne wo di dwuma, a ɛwɔ ewiase nyinaa mu, a wobɛtumi de ama obi foforɔ, na wobɛtumi ama obi foforɔ licence a ɛfa akontaabuo biara ne nsɛm a wode ma yɛn no nyinaa ho. Wopene so sɛ yɛwɔ ho kwan a asiane biara nni ho sɛ yɛde akontaabuo no ne nsɛm no bɛdi dwuma. Yɛkora yɛn ho kwan a yɛrennfa nneɛma a wode ma yɛn no bi anaa ne nyinaa nni dwuma. Wogyae wo ho kwan biara a wobɛnya wɔ akontaabuo bi anaa nsɛm biara a wode ma yɛn fa yɛn nneɛma ne nnwuma ho mu ho.
7.2. Wote ase na wogye tom nso sɛ ebia yɛayɛ anaasɛ yɛama wɔayɛ nneɛma a ɛte sɛ deɛ wode brɛɛ yɛn no anaa a ɛyɛ pɛ, na wogyae asɛm biara a wobɛtumi aka a ɛfiri sɛdeɛ nsɛm no ne wo deɛ a wode brɛɛ yɛn no yɛ pɛ no mu. Wote ase sɛ wonhyɛɛ wo bɔ biara sɛ wobɛnya akatua anaa animuonyam sɛ yɛde deɛ wode brɛɛ yɛn no bɛdi dwuma.
7.3. Wokyerɛ na wohyɛ bɔ sɛ deɛ wode brɛɛ yɛn no yɛ wo ankasa adwuma, na woamfa nsɛm a ɛyɛ obi foforɔ anaa dwumakuo foforɔ dea anni dwuma, na wowɔ mmara mu kwan a ɛma wotumi de licence a ɛwɔ Clause 7 yi mu no ma yɛn.
8. Wo nnwuma a ɛsɛ sɛ woyɛ
8.1. Ɛnsɛ sɛ wode wo ho hyɛ Program no mu gye sɛ woredi mmara, nhyehyɛeɛ, ne akwankyerɛ a ɛfa ho nyinaa so. Wo na ɛsɛ sɛ wohwɛ wo mpɔtam hɔ mmara mu na wodi so, ɛfiri sɛ ebia ɛbɛde nsiyɛ foforɔ bi aba wo a wode wo ho bɛhyɛ Program no mu ho.
8.2. Wo na wobɛyɛ wo ho hyɛde sɛ tax ho nsɛm biara a ɛfa wo a wode wo ho bɛhyɛ Program no mu ho, a ɛgyina ɔman a wote mu ne ɔman a woyɛ ne ɔmanfoɔ no so.
8.3. Ɛnsɛ sɛ wo sɔhwɛ no sɛe anaa ɛha data biara a ɛnyɛ wo dea.
8.4. Ɛnsɛ sɛ wokyɛ nsɛm anaa adeɛ biara a ɛmfata.
8.5. Ɛnsɛ sɛ wobu obi foforɔ kwan so anaa wode wo ho hyɛ dwumadie biara a ɛbu afoforɔ kokoamsɛm so mu.
8.6. Ɛnsɛ sɛ wode wo ho hyɛ dwumadie biara a ɛbɛha yɛn, Program no, anaa afoforɔ mu (a virus a wode bɛsoma ka ho).
