Bug Bounty
Program

Voldex Bug Bounty Program

We value the security of our games and the trust of our players. This Bug Bounty Program encourages responsible disclosure of vulnerabilities and helps us maintain a fair, safe, and enjoyable experience.

Scope

In-Scope:

  • Exploits affecting gameplay fairness (e.g., duplication glitches, infinite currency, unfair boosts, server crashes)

  • Account-related vulnerabilities (authentication bypass, impersonation)

  • Data/API leaks or unauthorized access to sensitive game data

  • Remote code execution or asset injection vulnerabilities

Out-of-Scope:

  • Cosmetic issues (UI bugs, typos)

  • Lag, crashes or feature bugs

  • Issues with third-party services (e.g., Discord, Roblox platform itself)

Rules of Engagement

  • Use test accounts and private servers. Do not impact real players.

  • Proof-of-concept only; do not mass exploit.

  • Do not disclose or sell vulnerabilities before we patch them.

  • Act in good faith and respect the community.

Submission Process

Send reports to security@voldex.com. Submissions must include:

  • Detailed steps to reproduce

  • Scripts and tools used to execute the exploit

  • Screenshots or video evidence

  • Clear explanation of the potential impact

Rewards

We provide rewards based on severity:

  • Critical (currency/item duplication, account takeover): $1,000

  • High (economy exploits, major bypasses): $500

  • Medium (moderate gameplay advantage): $100

Rewards are at Voldex's discretion, based on severity and impact.

Process

  1. Researcher submits report.

  2. Our team validates and prioritizes.

  3. We develop and release a fix.

  4. The researcher receives reward and acknowledgment (if desired).


By following this program, you help us keep our Roblox games fair, secure, and enjoyable for all players.