Terms of Service

Agreement to Terms

These Terms govern access to and use of the Descrimen platform, website, and any related services. By creating an account, submitting a finding, listing a program, or otherwise using Descrimen, you agree to these Terms. If you do not agree, do not use the platform.

If you act on behalf of an entity, you represent that you have authority to bind that entity. The entity is bound by these Terms to the same extent as an individual.

Descrimen may update these Terms. Material changes will be announced 30 days before they take effect. Continued use after the effective date constitutes acceptance.

Parties and Roles

Descrimen connects two sides. Researchers are individuals who discover and report security issues. Programs are projects, protocols, or entities that publish bug bounties and pay for validated findings. Descrimen is the platform operator.

A researcher who submits a finding is not an employee, contractor, or agent of Descrimen. A program that lists a bounty is not an employee, contractor, or agent of Descrimen. Researchers and programs are independent parties. Descrimen does not direct what researchers research or what programs pay.

Platform Role

Descrimen is an intermediary only. Descrimen is not a party to any bounty agreement between a researcher and a program. The bounty amount, scope, timeline, and validation criteria are set by the program, not Descrimen.

Descrimen provides infrastructure: submission intake, AI-assisted triage, deduplication, communication channels, on-chain payout rails, and KYC handling. Descrimen does not guarantee that any finding will be validated. Descrimen does not guarantee that any payout will be made. Programs retain sole discretion to validate, reject, or close findings.

If a researcher and a program disagree about validation or payment, Descrimen may mediate but has no obligation to do so. Descrimen's determinations on platform-level matters—account standing, fee policy, abuse—are final.

Accounts

You must be at least 18 years old to create an account. You must provide accurate information at registration and keep it current. You are responsible for all activity under your account and for the security of your credentials and wallet.

Researchers must register with a valid email and a wallet address they control. Programs must register with accurate entity information and a designated point of contact. Anonymous program registration is not allowed.

Accounts are non-transferable. You may not sell, lease, or lend your account to another party. Notify Descrimen immediately of any unauthorized access.

Fees

Descrimen charges a 4% fee on validated findings. The fee is deducted from the payout at the time of disbursement. There is no fee to register, no fee to submit findings, and no fee for AI triage.

If a finding is rejected, no fee applies. If a finding is closed as duplicate, no fee applies. The fee only applies when funds move from program to researcher through Descrimen's payout rails.

Programs may fund bounties in stablecoin, native gas token, or program-issued tokens. The 4% fee applies to the USD-equivalent value at the time of payout. Gas costs for on-chain transfers are paid by the program unless otherwise stated.

Acceptable Use

You agree to use Descrimen only for lawful purposes and in compliance with the Bug Bounty Policy and Acceptable Use Policy. Researchers must operate within the declared scope of each program. Programs must publish scope, severity, and reward tables in good faith.

You must not interfere with other users' use of the platform. You must not reverse engineer, scrape, or abuse the API. You must not attempt to access data that does not belong to you.

Prohibited Activities

The following activities are grounds for immediate suspension and forfeiture of pending payouts:

• Attacking assets outside of a program's declared scope
• Threatening, coercing, or extorting a program to increase a bounty
• Multi-accounting to farm rewards, manipulate ranking, or evade sanctions
• Sharing, selling, or transferring submissions to other researchers
• Submitting another researcher's work as your own
• Using automated AI tools to mass-generate low-quality submissions
• Money laundering, terrorist financing, or sanctions evasion
• Contacting program team members outside of the platform to pressure a decision

Descrimen may investigate suspected violations using platform logs, on-chain data, and external indicators. Findings may be frozen during investigation. A researcher who is found to have violated these Terms forfeits pending payouts and may be permanently banned.

Submissions and Intellectual Property

Researchers retain ownership of their submission content. By submitting, the researcher grants the program and Descrimen a worldwide, royalty-free license to use, reproduce, and disclose the submission for the purpose of triage, validation, and remediation.

Submissions must be original work. Plagiarism of another researcher's report, public advisory, or external writeup is prohibited and will result in forfeiture and ban. Descrimen may use submission metadata and outcomes—severity, payout, time-to-triage—for aggregate statistics and platform improvement, without disclosing identifying details.

Payouts

Payouts are issued on-chain to the wallet address on file unless the researcher has configured an alternate payout path. Researchers must complete KYC before personal cashout to a bank account or personal wallet above the threshold defined in the KYC Policy.

Charity donation is a no-KYC alternative payout path. Researchers may elect to direct payouts to a vetted charity wallet. Charity payouts are irreversible.

Descrimen is not a custodian. Once a payout is confirmed on-chain, Descrimen has no ability to reverse it. Researchers are responsible for the accuracy of their wallet address.

Termination

Descrimen may suspend or terminate any account at any time for violation of these Terms, for fraud, or for conduct that harms the platform or its users. Descrimen may also terminate accounts that are inactive for more than 24 months.

Programs may close their account at any time. Pending findings at the time of closure remain subject to the program's published validation timeline. Researchers may delete their account at any time subject to retention obligations in the Privacy Policy.

Upon termination, accrued but unpaid payouts will be released to the wallet on file, less any holds required by law or pending investigation.

Limitation of Liability

Descrimen provides the platform on an "as is" and "as available" basis. Descrimen disclaims all implied warranties, including merchantability and fitness for a particular purpose.

To the maximum extent permitted by law, Descrimen's aggregate liability for any claim arising out of these Terms is limited to the greater of (a) the fees paid by the user to Descrimen in the 12 months preceding the claim, or (b) USD 100. Descrimen is not liable for indirect, incidental, consequential, or punitive damages, including loss of bounty, loss of reputation, or loss of expected payout.

Descrimen is not liable for the acts or omissions of researchers, programs, KYC providers, wallet providers, or chain operators.

Dispute Resolution

Any dispute arising out of these Terms will first be submitted to informal negotiation for 30 days. If unresolved, the dispute will be submitted to binding arbitration administered by JAMS in Wilmington, Delaware. Arbitration will be conducted before a single arbitrator. The language of arbitration is English.

Claims may be brought as an individual only. Class actions and class arbitrations are not permitted. Either party may seek injunctive relief in court to protect intellectual property or confidential information.

Governing Law

These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict-of-laws principles. The federal and state courts located in Delaware have exclusive jurisdiction over any action that is not subject to arbitration.