[Tour de SOL] Updates to Tour de SOL and Bug Bounty Compensation Structure

Please see below for updated compensation plans from the Solana Foundation for Tour de SOL and Bug Bounty programs.

Tour de SOL Participation Compensation

  • Starting with Tour de SOL Stage 12, compensation levels are changing. Going forward we will now provide an amount of SOL equivalent to the fixed $USD dollar value of SOL at the end of each stage.

  • Compensation for successfully completing each stage will now be $500 USD worth of SOL as calculated by the Foundation.

  • This reduction is a reflection of our maturing network and response to a growing concern that some validators may have been joining TdS for compensation reasons alone. TdS is intended to be an adversarial test network, simulating the environment of Mainnet Beta while providing an onboarding path for new validators.

  • On the last day of each stage, the Foundation will determine which validators have successfully completed the tasks and are owed compensation. The Foundation will calculate the amount of compensation owed to each validator using the closing price of SOL on CoinMarketCap.com on the last day of each stage. For example, if the closing price of SOL on the last day of Stage 12 is $1, then a validator who successfully participated in TdS would be owed 500 SOL.

  • Compensation delivered as part of TdS will be delivered in 1 year locked stake accounts. The lock period will begin after the Foundation has made a determination about compensation on the first day after each stage is completed. For example, the 1-year lock period for Stage 12 will commence on April 1, 2021.

Bug Bounty Compensation

Bug bounty compensation will also be changed from payouts in fixed amounts of 1-year locked SOL to payouts in SOL determined using the USD spot price of SOL at the time the Foundation determines a bug bounty has been successfully completed . The Foundation will calculate the amount of compensation owed to each participant using the cash equivalent closing price of SOL on CoinMarketCap.com on the date that a bug bounty is deemed to have been successfully completed.

Below are listed the bug categories and the updated USD-pegged bounty amounts.

Critical Bugs

  • Loss of Funds/Safety Violation:
    • Up to $100,000 worth of 1-year locked SOL
  • Loss of of Availability (i.e. halting the network or preventing consensus from moving forward)
    • Up to $50,000 worth of 1-year locked SOL
  • DoS not involving RPC apis (i.e. flooding the node with messages, but not overwhelming the hardware)
    • Up to $40,000 worth of 1-year locked SOL
  • Any bugs that are ‘Critical’ but do not fall under the above categories will be assessed on the case by case basis and awarded
    • Up to $100,000 worth of 1-year locked SOL

Non-Critical Bugs

Any other security bugs that are identified but don’t fall within the ‘Critical’ category.

Up to $2,000 worth of 1-year locked SOL

RPC Bugs

Any security bugs that impact the ability of an RPC node to service requests

Up to $5,000 worth of 1-year locked SOL