clarify out-of-scope submissions

scroll-tech · Oct 17, 2023 · 70c3986 · 70c3986
1 parent bdf8a47
commit 70c3986
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/content/docs/en/technology/security/audits-and-bug-bounty.mdx b/src/content/docs/en/technology/security/audits-and-bug-bounty.mdx
@@ -74,4 +74,4 @@ Rewards depend on the severity of reported vulnerabilities:
 
 The scope of the bug bounty program covers the blockchain infrastructure and the smart contracts for bridging and rollup. For a detailed breakdown of bug categories, please refer to the bug bounty page.
 
-Besides the listed scopes in the bug bounty program, we also encourage reporting any vulnerabilities identified to Immunefi, which we will still consider for rewards. For any discoveries of critical vulnerabilities, please also send reports to security@scroll.io.
+Besides the listed scopes in the bug bounty program, we also encourage reporting any vulnerabilities identified to Immunefi, which we will still consider for rewards. For any discoveries of critical vulnerabilities outside of the scope of the bug bounty program, please also send reports to security@scroll.io.