Summary:

• We are excited to launch the Global Pro Trade Bug Bounty Program, running from September 5 to September 19, 2025. This program invites all registered Global users with completed KYC to report vulnerabilities and bugs in the platform, helping us ensure a safer and more secure trading experience.

How to Participate:

• Submit detailed reports via:

  • Official Bug Bounty submission form

• Each report must include a clear bug description with supporting screenshots or video), and user's OSL account ID & email.

• One unique bug per report; duplicates acknowledged but only first validated report is rewarded.

• Rewards will be credited within 30 days after verification.

Evaluation Criteria

Bug assessments will consider the following:

• Financial impact (potential asset loss, freezing, or miscalculation)

• Business impact (disruption of critical functions such as order placement, cancellation, matching, settlement)

• Affected user base (individual account, specific browser vs. wide scale)

• Reproducibility (consistent vs. intermittent, environment-dependent)

• Compliance and security aspects (bypass of KYC, risk controls, permissions, authentication)

• Attack complexity (skills and conditions required)

• Recovery cost and effort

Severity Levels and Examples

Critical / High Severity

• Direct or highly probable financial damage

• Major disruption affecting core trading systems

• Bypass of critical compliance or security controls

• Wide user impact or mass exploitation potential

• Exposure of sensitive or private user data

Medium Severity

• No direct financial loss but affects trading efficiency or decisions

• User confusion or operational risk increase

• Issues affecting certain environments or subsets of users

• Minor authentication or security logic flaws

Low Severity

• UI/UX inconsistencies, wording errors, and minor visual glitches

• Issues not impacting core workflow or security

• Problems with alternative solutions or minimal inconvenience

Reward Details:

• Total reward pool: 10,000 USDT

• Maximum reward per user: 500 USDT

• Rewards based on severity:

  • Low: 30 USDT

  • Medium: 50 USDT

  • High: 100 USDT

• Severity and eligibility for rewards are determined solely by the OSL team, which reserves the exclusive right to decide on reward distribution and amounts.

Eligibility & Rules:

• Only registered Global users who completed KYC can participate.

• One OSL account per user; multiple accounts disqualify eligibility.

• Submissions must relate to Global Pro Trade security and functionality.

• Prohibited: social engineering, phishing, destructive testing, unauthorized access.

Additional Notes:

• All reports are subject to OSL’s review and discretion.

• Confidentiality must be maintained; public disclosure without coordination is prohibited.

• The program is subject to modification or termination by OSL at our discretion.

Disclaimer:

Participation in the OSL Grobal Pro Trade Bug Bounty Program is subject to terms and conditions. Rewards, including USDT cashback, are limited, not guaranteed, and subject to eligibility, verification, and minimum trading requirements. OSL may restrict participation by jurisdiction and adjust or suspend the program at any time. Digital asset trading involves significant risks, including possible loss of principal. Terms & conditions apply.

FAQs:

Q: How do I qualify for rewards?

A: Submit a valid, reproducible bug report with required details and have a verified Global account.

Q: When will I receive rewards?

A: Rewards are distributed within 30 days after confirmation.

Q: What if my bug was already reported?

A: Only the first verified report is rewarded; duplicates are acknowledged.