friend.tech has launched a bug bounty program, with rewards allocated based on the severity of the disclosed defects and the assets at risk. The highest reward is up to 1 million USDC. Risks are divided into four levels: Critical: Issues that could affect many users and have serious reputation, legal, or financial consequences.

For example, permanently locking a contract or withdrawing funds from all users; High: Issues that affect individual users and could pose a moderate threat to their reputation, legal, or financial risks if exploited; Medium: Risks are relatively small and do not pose a threat to user funds; Low/Informational: The issue will not immediately pose a threat, but is related to security best practices.