> For the complete documentation index, see [llms.txt](https://docs.allscale.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.allscale.io/supplement-material/bug-reports-and-security/rewards-and-recognition.md).

# Rewards & Recognition

We want every valid report to receive meaningful recognition. Rewards are decided **case by case** after our engineering team has verified the issue and assessed its impact.

***

### 🎁 Types of Rewards

#### AllScale Points (AS Points)

**AS Points** are the core reward for valid bug reports. They're credited to your AllScale account and work the same way as other AS Points in our [Rewards](https://docs.allscale.io/allscale-pay/rewards) system.

#### Stablecoin Thank-You

More impactful contributions, especially security vulnerabilities that could affect payments, accounts, or user data, may also receive a reward in **USDC or USDT**. This can be given together with AS Points.

#### AllScale Contributor Role

Contributors with a confirmed valid report are invited to claim the **AllScale Contributor** role in our [Discord](https://discord.com/invite/allscale) community. This is entirely optional. Joining Discord isn't required to receive any other reward.

***

### ⚖️ How Rewards Are Determined

We consider:

* **Real-world impact**: what could actually happen if the issue were exploited, and to how many users
* **Exploitability**: how practical the issue is to exploit, and what access it requires
* **Report quality**: how clearly the issue is documented and how easily we can verify it
* **Originality**: whether the issue was already known to us

Severity is based on actual impact, not on the type or name of the issue. An issue that hasn't caused any loss can still be serious.

***

### ⭐ What Counts as a Valid Contribution?

A report generally qualifies when it:

* Describes a **reproducible bug or vulnerability** in an in-scope AllScale product
* Is the **first report** with enough information for us to verify it
* Follows the [Testing Guidelines & Scope](https://docs.allscale.io/supplement-material/bug-reports-and-security/testing-guidelines-and-scope)

Multiple symptoms caused by the **same root cause** are treated as one issue. Independent issues in the same report are assessed separately.

If several people report the same issue, the reward generally goes to the first person who provided enough information to verify it. New evidence that significantly expands the impact of a known issue may also be recognized.

***

### 🚫 What Is Not Eligible

We'll still reply to these, but they aren't eligible for bug-report rewards:

* Feature requests, product suggestions, or usage questions
* Issues we can't reproduce or verify from the information provided
* Automated scanner output without a verified issue
* Issues already known to us, with no new information
* Duplicate or split submissions of the same issue
* Reports involving testing outside our [guidelines](https://docs.allscale.io/supplement-material/bug-reports-and-security/testing-guidelines-and-scope)

***

### 💸 How Rewards Are Delivered

1. Once a reward is approved, we'll **email you** to confirm the reward and the details we need
2. **AS Points:** share the email or identifier of your AllScale account
3. **USDC / USDT:** confirm the token, network, and wallet address. We'll reconfirm this in the same email thread before sending
4. **Contributor role:** if you'd like it, share your Discord username

We'll let you know once each reward has been delivered.

{% hint style="danger" %}
We will **never** ask for your password, private key, passkey, or recovery phrase to deliver a reward. Reward communication only happens through the email thread of your original report.
{% endhint %}

***

### 📌 Notes

* Rewards are discretionary and confirmed individually. Once we've confirmed a reward with you, we'll honor it
* You can choose which rewards to accept. Declining AS Points or the Discord role doesn't affect an approved stablecoin reward
* AS Points aren't automatically convertible to cash
* AllScale reserves the right to withhold or adjust rewards in cases of abuse, fraud, or violations of our guidelines
* Reward details may be updated as this initiative evolves