Program Fit
Short read of the bounty brief, target rules, exclusions that matter, and duplicate-search terms.
Authorized scope report assist
Check the program scope before the report gets messy.
Send the program link, rough notes, screenshots, logs, and current draft. TinyOps turns them into a scope-fit packet: what appears authorized, what exclusions matter, duplicate-risk search phrases, evidence order, and report wording. TinyOps does not scan, exploit, or perform new testing.
What you receive
A scope-first packet before you submit.
Scope Packet
Clear in-scope basis, out-of-scope risks, unknowns, triage questions, and evidence order.
Report Assist
Optional report wording for title, impact, reproduction summary, and remediation notes from your supplied evidence.
How it works
You bring the authorized material. We sharpen the scope packet.
1. Upload materials
Program link, issue notes, screenshots or logs, and your current draft.
2. Review scope
You get the program fit summary, exclusion notes, duplicate-search phrases, and evidence checklist.
3. Submit yourself
You approve any wording and submit through the program account you already use.
Recent public example
Runnable evidence, ranked impact, and a concrete fix.
Four earlier TinyOps submissions to authorized AIBTC bounty tasks were selected and paid a confirmed total of 8,500 sats in sBTC. The amounts and receipts were verified on-chain. Past selection does not guarantee a future program will accept or pay a report.
The linked smart-wallet example reproduced an ambient-authority flaw against the audited commit and includes a runnable Clarinet and Vitest case. That newer submission was not selected, so the report is shown only as a public work example and no payout is claimed for it.
- Exact audited commit recorded
- Direct attacker rejection confirmed
- Intermediate-contract exploit reproduced
- Impact and affected asset paths ranked
- Immediate-caller fix and regression coverage proposed
Best fit
Useful when the finding may be valid but the program rules are the risky part.
Best for finders who already have authorized evidence and want a scope-safe packet before submission. TinyOps works from your notes and the program material you provide, without running tests or interacting with the target.
- One program and one finding per order
- Listed price and turnaround
- Scope boundaries and duplicate-risk search terms
- Evidence list tied to the authorized claim
- Authorized-scope wording only
Request scope assist
Send the program link and rough evidence.
Send the brief here and TinyOps will confirm whether the fixed scope-assist packet fits before work starts.
Ready to check scope