Bug bounty · prize money

Break our security, get rewarded

If you can demonstrate a real weakness in Buy Accsmarket — the storefront, the supplier panel, delivery of purchased assets or our APIs — report it here and we pay for it. Every report reaches our admin console instantly and you can track its status on this page.

Critical

RCE, auth bypass, database or asset exfiltration

$300 – $1,000

High

IDOR on orders/assets, privilege escalation, payment tampering

$120 – $300

Medium

Stored XSS, CSRF on sensitive actions, logic flaws

$40 – $120

Low

Rate-limit gaps, info leaks, hardening issues

$10 – $40

Rules of engagement

Test only your own accounts and data — never touch other users' orders or assets.
No DoS, spam, mass automated scanning or social engineering of our staff.
Do not exfiltrate, publish or sell any data you happen to access.
Report privately here first; public disclosure voids the reward.
First valid report of an issue wins; duplicates are closed without payout.
Rewards are paid to your wallet or crypto address after the fix is verified.

We tie every report to an account so we can pay the right researcher.