Bug bounty

ULTMU Bug Bounty

If you find a bug or a vulnerability, you may be eligible for a reward. The program exists to improve the project and protect the security of our players.

Report a bug
Up to 3,000 UltCoinCritical bug or dupe

Rewards by severity

  • Critical bug or dupeUp to 3,000 UltCoin
  • High800–1,200 UltCoin
  • Medium400–800 UltCoin
  • Minor100–400 UltCoin

We set the severity after checking the report: it depends on how much the bug affects the project.

How it works

  1. Send a report

    Describe the bug on our Discord.

  2. We check it

    We confirm the bug and assign it a severity level.

  3. Get the reward

    Once the bug is confirmed, you receive the reward in UltCoin.

Keep it private: a bug or vulnerability disclosed publicly is not rewarded.

Rewards for cheats

You can also get rewards for providing cheats that work on our server. To do this, send the cheat through Discord, only to our team, and describe the principle of its use. After we analyse the cheat's performance, we set the amount of the reward.

Out of scope

The program does not cover:

  • Spam and social engineering techniques.
  • Denial of service (DoS) attacks.
  • Errors not related to the project's code.

Exploiting a bug in silence instead of reporting it is a violation. See the conduct rules

More from the site

Official channels