Join our Bug Bounty Program and get rewarded. Help us find the bugs 👀
🐛 🐜 🦗
The Bridge Champ team recognizes the value external experts bring to usability, stability, and security. We welcome — and reward — eligible contributions from researchers.
If you believe you’ve found a bug or security vulnerability, we encourage you to report it right away. Before submitting a report, please review this page — including our disclosure policy, reward system, and program scope.
¶ Responsible Research and Disclosure Policy
To participate in the Bug Bounty Program, researchers must agree to:
- Never interact with user accounts without explicit written consent from the account holder.
- Avoid privacy violations or service disruptions (including unauthorized data access or degradation).
- Test only using your own account or accounts with explicit consent.
- Provide reasonable time for us to resolve issues before public disclosure.
- Not be an employee, contractor, or immediate family of anyone at Bridge Champ or its affiliates.
- Be at least 18 years old.
We reward researchers who help improve our platform. Rewards are discretionary and based on risk, impact, severity, and reproducibility.
- Identify and report a bug or vulnerability affecting usability, stability, or security.
- Report it as soon as reasonably possible after discovery.
- Submit via the in-game feedback form or by emailing info@bridgechamp.com.
- We investigate all valid reports. Response time may vary based on priority.
- We consider the exploitability, impact, and quality of your report.
- Lower rewards apply for issues affecting only outdated browsers/devices.
- Duplicates are rewarded only once — to the first valid submission.
- We may publish anonymized reports or a leaderboard of contributors (unless you request otherwise).
- Bridge Champ reserves the right to update or cancel the program at any time.
Valid reports are rewarded. The reward amount is discretionary and depends on the impact, severity, and quality of the report. We will contact you with the details after reviewing your submission.
- When reporting bot behavior, use the in-game feedback form — no screenshots needed.
- Please read the bot's convention card first — reports based on misunderstandings will be ignored.
- Reports involving 1 HCP differences or legitimate alternative play lines may be ignored.
- Severe bot misplays (e.g., passing over artificial bids) may be classified as Class 4. Otherwise, most bid/play issues will fall under Class 2 or 3.