SEAL Whitehat Safe Harbor
Adopted · Last updated: 2026
Adoption
CreateSolana adopts the SEAL Whitehat Safe Harbor Agreement to pre-authorize whitehat interventions during active exploits. This scope is published publicly at this URL. On-chain registration is planned but not required for adoption.
1. Protocol Information
- Name: CreateSolana
- Type: Centralized team (non-DAO)
- Website: https://createsolana.com
- Contact: security@createsolana.com
- Chain: Solana Mainnet
2. Assets Under Scope
CreateSolana is a non-custodial frontend. We do not hold user funds in smart contracts.
In scope:
- Vulnerabilities that could lead to users signing malicious transactions (fee wallet substitution, wrong destination).
- Exposure of user data (PII, wallet addresses, transaction history).
- XSS or injection that could compromise the signing flow.
- CSP bypass or header injection.
- Supply chain attacks via dependencies.
Out of scope (report to respective maintainers):
- Solana blockchain protocol vulnerabilities.
- SPL Token, Token-2022, Metaplex, or pump.fun program bugs.
- Phantom, Solflare, or Coinbase wallet bugs.
- Helius, Chainstack, Arweave, or Irys infrastructure issues.
3. Asset Recovery Address
Since CreateSolana is non-custodial and does not hold user funds, there is no recovery address for drained protocol funds. Whitehats who discover a vulnerability that could lead to user fund loss should report via our Responsible Disclosure Policy.
4. Bounty Terms
Bounties are evaluated on a case-by-case basis. Typical ranges:
| Severity | Bounty (USD equivalent in SOL) |
|---|---|
| Critical | $1,000 – $10,000 |
| High | $500 – $5,000 |
| Medium | $100 – $1,000 |
| Low | $50 – $500 |
Bounties are not guaranteed and depend on impact, reproducibility, and whether the report follows our Responsible Disclosure Policy.
5. Identity Requirements
- Anonymous reports accepted.
- No KYC required for bug bounty reports.
- For payouts above $1,000, we may request a wallet address for payment.
6. Contact
- Security reports: security@createsolana.com
- Policy: /legal/disclosure
- security.txt: /.well-known/security.txt
7. Legal
This scope document constitutes CreateSolana' adoption of the SEAL Whitehat Safe Harbor framework. The on-chain registration via the SEAL Self-Adoption Tool is planned to further strengthen this commitment. Until then, this public publication serves as our binding declaration of adoption.