Looking 👀 for a Bitcoin-based bug bounty solution. \ stacker news ~bitcoin

pull down to refresh

Looking 👀 for a Bitcoin-based bug bounty solution.

680 sats \ 10k boost \ 16 comments \ @Satochip_ 18 Feb bitcoin

Hello,

I'm looking for a Bitcoin-based bug bounty solution.

Here is the big picture:

I would like to advertise a few dev tasks (aka bounty);
Each task has it's own attached Bitcoin address with a few sats;
Everyone can "boost" any tasks by sending more sats into the vault (on-chain or off-chain⚡);

In a perfect world, this Bitcoin-based bug bounty solution should be web-based with a front-end and an easy-to-use back-end solution:

I can create several tasks and specify a Bitcoin xpub
Each tasks can be heavily described with subtasks and GitHub actions
The front-end can display useful information such as "how many donations were made for this task", "an explorer button" etc.

Of course, I can build it from scratch but I'm wondering if there is any solution out there or if someone has already made something similar.

👇

view all related items

140 sats \ 4 replies \ @nullcount 18 Feb

I like "vote with sats" machanic as a way to prioritize features. But there's a lot of trust involved with actually paying out the reward.

Why wouldn't I just wait for dozens of submissions and pick the best one?

Who decides whether the bounty is 100% complete?

What if multiple people complete the bounty? Who decides which person should receive the reward? Should you split the reward?

The kind of mercenary devs that seek bounties probably aren't going to convert to long term contributors of your projects.

LLMs can ingest your requirements and instantly give you a code submission for insanely cheap.

Robosats has a bounty program. Its all handled by github issues. They just have a markdown file that tracks all the active bounty issues in a table. You complete the issue, send an LN invoice and get paid if they want to pay you :)

10 sats \ 3 replies \ @Satochip_ OP 18 Feb

Trust is definitely the main concern.

The company's reputation could be leveraged in this process. If the bounty is clearly defined with specific milestones and KPIs, that might be sufficient.

To manage participation, a whitelist can be implemented. This means that anyone wanting to take part in a specific bounty must be approved by the bounty organizer. Additionally, the number of whitelisted participants working on a bounty can be publicly displayed.

The bounty itself should be complex enough to deter mercenary developers while incentivizing high-quality contributors.

10 sats \ 2 replies \ @nullcount 18 Feb

Sounds like employing a contractor with extra steps...

10 sats \ 1 reply \ @Satochip_ OP 18 Feb

Community builders != contractors

The goal here is to incentive the community around a project. People can top up the sats vault for a specific feature. Other can help. Collaborative tool with Bitcoin rewards.

0 sats \ 0 replies \ @nullcount 18 Feb

Hence, the extra steps...

60 sats \ 2 replies \ @south_korea_ln 18 Feb

Something like that came out of a LN Hackathon a while back. Can't remember the name, will post when I do.

Edit: here it is, Lightning Bounties

50 sats \ 1 reply \ @south_korea_ln 18 Feb

@bounty_hunter and #664033

0 sats \ 0 replies \ @Satochip_ OP 18 Feb

Very interesting. Thank you very much!

70 sats \ 0 replies \ @Car 19 Feb

Use Lightning Bounties, we just had our entire plebbook.com updated in the past week. Literally had no luck for almost a year. https://www.lightningbounties.com

Team is amazing and are in Top Builder Season 2.

10 sats \ 1 reply \ @The_Narrator 18 Feb

I love lightning bounties! I may or may not be a bounty hunter on there ;)

20 sats \ 0 replies \ @Satochip_ OP 18 Feb

Tell me you're a bounty hunter without telling me you're. :D

50 sats \ 2 replies \ @bounty_hunter 18 Feb

Yes, there is ... Thanks for the call out @south_korea_ln. We've got a couple of these features already covered:

The front-end can display useful information such as "how many donations were made for this task", "an explorer button" etc.

See: https://app.lightningbounties.com/issue/b32dedf6-67c9-4dd5-bd68-8aa5641a2054

Each tasks can be heavily described with subtasks and GitHub actions

See the linked issues / PR's like: https://github.com/BrantaOps/branta-core/issues/22

We're still early, so we'd be happy to support your bounties and get your feedback. Message me at will @lightningbounties.com to continue the conversation.

60 sats \ 0 replies \ @south_korea_ln 18 Feb

Happy to hear the project is still going strong~~

10 sats \ 0 replies \ @Satochip_ OP 18 Feb

Mailed :)

0 sats \ 1 reply \ @OT 18 Feb

Not sure if this is what you're looking for but check out Nostrocket or Stakwork

0 sats \ 0 replies \ @Satochip_ OP 18 Feb

Nostrocket looks very interesting!