Bug bounty
baff.gg is in alpha and things are broken. If you find something, tell us and we’ll pay you for it.
Found something broken?
Send it through the support form. It takes a couple of minutes, and a screenshot or recording helps us reproduce it.
What we pay
Per bug, in US dollars. We read every report and decide which of the two it is.
- $25
Major bug
Something that stops people from using baff.gg, loses their data, or shows them something they shouldn’t see. Can’t log in, messages that don’t send or arrive, calls that won’t connect, uploads that vanish, a server you can read without being in it.
- $5
Small bug
Something that’s wrong but you can work around it. A button that does nothing on one screen, text that’s cut off, a setting that doesn’t save, a layout that breaks on your phone.
How to report one
- Check the list first. Open Known issues and limits. Anything on it is already known and doesn’t count.
- Open the form. Submit a request and pick Report a bug. You sign in with your email.
- Write the steps. Say where it happened (browser, desktop app or phone), what you did one step per line, what you expected and what happened.
- Attach proof. A screenshot or a short screen recording makes it much faster for us to confirm.
The rules
Short, so you know what to expect before you spend your time.
First report wins
The first report that lets us reproduce a bug gets paid. Later reports of the same bug aren’t, and neither is anything we already knew about.
We decide the size
We pick major or small after we reproduce it, and we tell you why. If you think we got it wrong, reply to the request and say so.
It has to be baff.gg
The website, the apps, the API and the docs. Bugs in your browser, your operating system, Discord or any other site aren’t ours to fix.
Not bugs
Feature ideas, things that work as described, spam or abuse you saw from other people (use Report in the app for those), and problems with a bot someone else made.
Test safely
Use your own accounts and servers. Don’t read other people’s private data, don’t flood or load-test anything, and don’t try to take baff.gg down or trick our staff or users. Reports found that way aren’t paid.
Keep it private until it’s fixed
Requests are only seen by our team. If your bug lets someone get at data they shouldn’t, please don’t post how until we tell you it’s fixed.
Getting paid
When we accept a report we email you to ask how you want to be paid, in US dollars. One person, one account per report.
Questions people ask
- How much does baff.gg pay for a bug?
- $25 for each major bug and $5 for each small one. We decide which is which when we read your report, and we tell you what we picked.
- What if someone already reported the same bug?
- The first report that lets us reproduce the bug gets paid. If we already knew about it, or it is listed in Known issues, it doesn’t count.
- Do I need an account to report?
- You need an email address to sign in to the Help Center. A baff.gg account helps, because most bugs happen inside the app, but it isn’t required to send the report.
- Is this safe for me to test?
- Test with your own accounts and servers. Don’t read other people’s private data, don’t spam or flood anything, and don’t try to take baff.gg down. Reports we can only get by doing those things aren’t paid and can get your account suspended.
- How do I get paid?
- When we accept a report we email you to ask how you want to be paid. We pay in US dollars.
- Can this change?
- Yes. baff.gg is in alpha and so is the bounty. We may change the amounts or stop it, and we’ll post it on this page first. Reports we already accepted still get paid.