0xKorok

IndependentDisclosure (Protocol Guide)

IndependentDisclosure is a peer-to-peer vulnerability disclosure framework that combines smart contracts with carefully structured off-chain processes to enable fair and transparent security disclosures.

This guide outlines the process from the protocol's perspective, explaining what to expect and how to participate. A guide from the researcher's perspective can be found here.

---

Git Safety Tips

0xKorok

IndependentDisclosure (Researcher Guide)

IndependentDisclosure is a simple smart contract designed to be combined with carefully structured off-chain processes to enable effective and fair peer-to-peer vulnerability disclosure.

This guide outlines the process from the researcher's perspective. For the protocol's perspective, check here.

---

Git Safety Tips

0xKorok

Gradual Disclosure Process Flow

graph TD
    A[Initial Contact] --> B{Response?}
    B -->|Yes| C[Begin Negotiation]
    B -->|No| D[Extended Contact - 48h Window]
    D --> E{Response?}
 E -->|Yes| C

0xKorok

// SPDX-License-Identifier: MIT
pragma solidity 0.8.28;

/**
 * @title IndependentDisclosure
 * @notice Manages independent vulnerability disclosure negotiations between researchers and protocols
 * @dev Implements a two-phase acceptance process: initial terms for disclosure access,
 *      followed by negotiation and final terms acceptance
 * @dev All terms (severity, payment, etc) are handled off-chain through private GitHub repository
 */

0xKorok

// SPDX-License-Identifier: MIT
pragma solidity 0.8.28;

interface IERC20 {
    function transfer(address to, uint256 value) external returns (bool);
    function transferFrom(address from, address to, uint256 value) external returns (bool);
    function balanceOf(address account) external view returns (uint256);
}

interface IDisclosureFactory {