Come polish it with us
Bug Bounty
We shipped BeyondHumanearly to get it back into your hands. It won't be perfect on day one — so we're inviting the community on the journey. Find a bug, report it, and earn COGS for helping us polish the grid.
How it works
- Find a genuine bug, report it privately (see below), and — if it's valid and new — we pay a reward in COGS.
- Rewards are credited straight to your account and recorded on the public economy page as a bounty credit — transparent, never hidden inflation.
- Game bugs are forgivable; money bugs are not. Anything that touches your COGS balance, custody, or account access is our top priority and pays the most.
Rewards
Reward tiers by severity. Severity is assessed by impact — the founder's classification is final.
Anything that could misreport, misplace, create, or destroy COGS, or grant access to funds or an account that isn't yours. Highest priority — reported privately and fixed first.
- A migrated balance that displays or credits the wrong amount
- Funding or pulling from a character crediting/debiting incorrectly
- Duplicating COGS, or spending the same balance twice
- Accessing another player's account, wallet, or characters
A bug that breaks a core flow or gives an unfair, game-warping advantage — but does not touch custody balances directly.
- NFT verification failing for a legitimate holder, or granting access without ownership
- An exploit that reliably breaks combat, movement, or scavenging fairness
- A crash or state corruption that affects other players
A genuine bug with limited impact — cosmetic, edge-case, or single-player inconvenience that doesn't affect funds or fairness.
- UI glitches, incorrect labels, or broken links
- An action that errors in an unusual edge case but recovers cleanly
Total programme allocation: 15,000 COGS. Rewards are paid at the founder's discretion and may be adjusted as the programme runs.
How to report
Send bug reports through the in-app support form (you'll need to be logged in). Please include:
- What you did, step by step, so we can reproduce it
- What you expected to happen, and what actually happened
- For anything money-related: the amounts, character/account context, and roughly when it happened
- Screenshots if you have them
Report money and custody issues privately here first — do not post them publicly. Give us a reasonable chance to fix them before disclosing anywhere else.
Rules
- Report, don't exploit.Demonstrate a bug with the minimum needed to prove it. Do not exploit it for gain, and never access, move, or modify funds, accounts, or data that aren't yours.
- First valid report wins. For duplicates of the same underlying issue, the first clear report is the one rewarded.
- No exploit-then-report. Deliberately abusing a bug before (or instead of) reporting it disqualifies the report and may result in a ban.
- Out of scope: issues already on the known-issues list; purely cosmetic preferences; third-party infrastructure (Supabase, Railway, email delivery); social-engineering, phishing, spam, or denial-of-service attempts; and deposit/withdrawal flows (these are switched off at launch and enable later).
- Severity and rewards are at the founder's discretion, decisions are final, and the programme is void where prohibited.
- You must have a registered account to receive a reward.
Our security promise to you
We will never DM you, never ask for your seed phrase, and never email you a login link. Our emails only ever point you to enter.beyondhuman.ai. Any message claiming otherwise is not from us — report it.