The code can be identified on the etherscan with the following address 0x04F062809B244e37e7fDC21D9409469c989C2342.
The other related files including deployment method, testing were released in Github.
The steps (transactions) to set up dApp after we deploy the contract are as follows:
deploy with parameters for JoysoWallet’s address and Joyso token’s address, the owner would be the account which create the contract
Owner must add a new admin into the contract
Owner transfer the ownership to JoysoWallet, using a multiSig wallet to ensure protection for Joyso contract’s operating power.
Admin add the token’s address to the contract
The scope of our bug bounty program includes all contracts related to the JOYSO and dApp website itself. The bug bounty program is an ongoing campaign and we welcome your submissions anytime.
We are using the OWASP risk assessment methodology to determine the bug’s level of threat to determine the bounty value.
Note: Up to $100 USD
Low: Up to $500 USD
Medium: Up to $1,000 USD
High: Up to $2,500 USD
Critical: Up to $5,000 USD
Please note that the quality of submission’s will affect the compensation amount. A high quality submission includes an explanation of how the bug can be reproduced, a failing test case, and a fix that makes the test case pass. High quality submissions may be awarded amounts higher than the amounts specify above.
Note that bounties will be paid in ETH and that JOYSO team members and paid auditors are not eligible for bounty compensation.
Public disclosure of the bug or indication of an intention to exploit it on the mainnet will make the report ineligible for a bounty. If in doubt about other aspects of the bounty, most of the Ethereum Foundation bug bounty program rules will apply.
Please report bug bounty submissions to firstname.lastname@example.org