💰 Monero Bounty: How to Contribute to MyZubster Security & Development
MyZubster is an open-source ecosystem combining a skills marketplace, NFT management, and private payments on Monero's Tari sidechain. We've recently added a transparent privacy policy and improved code security. Now we're looking for community contributions.
🔍 What is the Monero Bounty System?
The Monero bounty system incentivizes development and security through XMR rewards. Bounties are used for:
New feature development
Security research and vulnerability fixes
Translations and documentation
Maintenance of existing projects
Bug reporting and responsible disclosure
🛡️ Our Security Commitment
We recently fixed several vulnerabilities in MyZubster:
Issue Solution
CVE-2023-45857 (Axios) Upgraded to axios@1.7.9
Missing CSRF Implemented token-based middleware
Docker root Non-root user in containers
Missing CORS Configured for dev/production
This work follows the Monero Vulnerability Response Process, which establishes procedures for responsible vulnerability reporting and bounty distribution.
💰 How Monero Bounties Work
- Bounty Types Type Description Vulnerability Security bug reports (HIGH/MEDIUM/LOW) Development New features, code improvements Documentation Translations, guides, tutorials Maintenance Updates, refactoring, testing
- Bounty Distribution
Bounties are distributed through:
Monero CCS (Community Crowdfunding System)
Direct XMR transfers to contributors
GitHub Sponsors (where applicable)
- Reward Levels Severity Reward Range Critical 100–500+ XMR High 50–100 XMR Medium 10–50 XMR Low 1–10 XMR Documentation 0.5–5 XMR 🎯 How to Contribute to MyZubster Step 1: Explore the Code bash
Clone the repository
git clone https://github.com/DanielIoni-creator/MyZubster.git
cd MyZubster
Explore the Rust backend
cd my_first_nft/nft
cargo build
Explore the React frontend
cd myzubster-frontend
npm install
npm run dev
Step 2: Find an Issue
Check our issue tracker:
👉 https://github.com/DanielIoni-creator/MyZubster/issues
We label issues by:
good first issue – for beginners
help wanted – for community contributors
security – for vulnerability reports
bounty – for paid tasks
Step 3: Submit a Pull Request
bash
Create a new branch
git checkout -b fix/your-feature
Make your changes
...code...
Commit and push
git add .
git commit -m "feat: description of your changes"
git push -u origin fix/your-feature
Open a Pull Request
gh pr create --base main --head fix/your-feature --title "feat: your feature"
Step 4: Claim Your Bounty
After your PR is merged:
Contact us via GitHub or Twitter
Provide your Monero address
Receive XMR based on the bounty level
🛡️ Responsible Disclosure Policy
If you find a security vulnerability:
Do not open a public issue (to prevent exploitation)
Email us at: security@myzubster.com (or use GitHub's private vulnerability reporting)
Wait for confirmation before disclosing publicly
Receive bounty after fix is verified
📋 Current Bounty Opportunities
Task Difficulty Reward Status
Implement HTTPS 🟡 Medium 10 XMR Open
Add Rate Limiting 🟡 Medium 8 XMR Open
Input Validation 🟢 Easy 5 XMR Open
Security Audit 🔴 Hard 50 XMR Open
Documentation 🟢 Easy 2 XMR Open
Translations 🟢 Easy 1 XMR Open
🔗 Useful Links
MyZubster GitHub: https://github.com/DanielIoni-creator/MyZubster (private – contact for access)
Public NFT Template: https://github.com/DanielIoni-creator/tari-nft-template
Monero Bounty System: https://github.com/monero-project/monero/issues
Tari Documentation: https://tari.com/lessons
📬 Connect with Me
📖 Dev.to: https://dev.to/danielioni
🐦 X (Twitter): https://x.com/myzubster
💼 LinkedIn: https://linkedin.com/in/daniel-ioni-62b2b9423/
🐙 GitHub: https://github.com/DanielIoni-creator
🚀 How to Publish on Dev.to
Go to https://dev.to/new
Title: 💰 Monero Bounty: How to Contribute to MyZubster Security & Development
Tags: monero, security, opensource, bounty, rust
Cover image: https://raw.githubusercontent.com/DanielIoni-creator/myzubster-assets/main/dashboard.png
Copy and paste the content above
Click "Publish"
🐦 Social Media Posts
LinkedIn
text
💰 Monero Bounty: contribute to MyZubster security & development!
We're inviting the community to help us secure and improve MyZubster.
✅ Security audit
✅ New features
✅ Documentation
✅ Translations
Read the full guide:
https://dev.to/danielioni/monero-bounty-how-to-contribute-to-myzubster-security-development-5f6m
Monero #Bounty #Security #OpenSource #MyZubster
Twitter (280 chars)
text
💰 Monero Bounty: contribute to MyZubster!
We're looking for:
✅ Security audits
✅ New features
✅ Documentation
✅ Translations
Read the full guide:
https://dev.to/danielioni/monero-bounty-how-to-contribute-to-myzubster-security-development-5f6m
Monero #Bounty #OpenSource #MyZubster
Built with ❤️ for the Monero and Tari community.
