This program is designed to reward responsible disclosure of bugs and show our appreciation for external contributions.
We also welcome your ideas on improvement. However, their value is much harder to objectively estimate, so we expect you to trust our judgement here. If the idea is clearly defined and we make a decision to implement it, you will be fairly rewarded. More severe bugs and ideas for significant improvement will be met with greater rewards.
A defect that will not directly affect the payment process or cause its failure. Has more of a “cosmetic” nature and doesn’t really bother users. Reward $100
A defect that does directly affect payment flow, and may cause a payment failure or incorrect crediting. Reward $300
A defect that may cause some major system failure or massively affects a user’s ability to make a payment. This should not be connected to scheduled or unscheduled system downtimes, connection issues, etc. Reward $1000
You may choose to receive the funds in your PayPal account, in which case, you will have to acknowledge that the provided PayPal account is your personal account. You may also choose to receive the amount as credit for any of the games Xsolla distributes. In this case, we will request your nickname/email associated with the account.
By submitting a bug report you agree to comply with the Xsolla Bounty Program Policy, which forbids public or private disclosure of the details of any vulnerability or bug on Xsolla before the 30 days after the bug has been fixed.
By participating in this program, you agree to adhere to the above rules and conditions. All rules must be followed to be eligible for rewards.