Responsible reporting
Security policy
Report a suspected vulnerability without including passwords, private keys, identity documents or other sensitive user data.
The editorial priority is separating an affiliate code from a guaranteed benefit. Every reward, rebate or eligibility claim must be verified in the destination terms. Readers should document their residency, funding currency, onboarding entity and product-specific restrictions. The primary platform scope is Bybit. For a Bybit-focused review, distinguish spot execution from perpetual-contract costs, include funding and liquidation mechanics, and verify the legal account entity plus withdrawal safeguards before trading. This guide assumes that regional rules and product access can change, so every decision needs a current check.
Contact
Use security@bybitbonus.net. This address must be configured before production deployment.
Scope
Reports may cover the static site, redirects, scripts, headers and domain configuration. Exchange systems and affiliate destinations are outside this site's control.
Testing limits
Do not perform denial-of-service testing, social engineering, credential attacks, automated account creation or destructive testing.
Safe evidence
Provide the affected URL, observed behavior, reproduction steps and a minimal non-sensitive proof.