Legal & Compliance

1. Legal Information

Bastion is a Web3 security coordination platform. Bastion helps projects and researchers coordinate security work, vulnerability disclosure, bounty programs, launch readiness programs, and public trust signals.

Bastion is not a law firm, financial advisor, auditor, insurer, or regulatory authority. Information on this page and elsewhere on the platform is provided for coordination and informational purposes.

2. Authorized Security Research Notice

Bastion supports authorized security research only. Researchers must follow the scope and rules of each project or program. Unauthorized testing, exploitation, disruption, data access, or public disclosure is prohibited.

If a project has not authorized testing, researchers should not test it through Bastion or submit reports against it.

3. Responsible Disclosure

Researchers should submit vulnerabilities privately through Bastion workflows where available. Researchers should allow projects reasonable time to review and respond.

Public disclosure should only occur when permitted by project rules, disclosure policy, or an agreed process between the researcher and project.

4. Launch Readiness Programs

Robinhood Chain Launch Readiness Programs are designed for testnet and pre-mainnet security collaboration. They help projects build security history and coordinate researcher feedback before launch.

These programs may not include escrowed payments. Participation does not guarantee compensation, grants, token allocations, hiring, or future rewards. Projects may choose to recognize or reward contributors later, but that is entirely at project discretion.

5. Payments and Escrow Notice

Escrow-backed bounty workflows may be available where configured on the platform. Arbitrum escrow or payment support may exist where configured in the environment and program settings.

Robinhood Chain Launch Readiness does not imply Robinhood mainnet escrow or payment settlement. Bastion does not guarantee reward payment unless a specific program and configured workflow provides for it.

6. No Professional Advice

Information on Bastion is provided for coordination and informational purposes. It is not legal, financial, investment, tax, or security advice.

Projects should obtain independent professional advice when needed. Researchers are responsible for their own legal and tax obligations related to security research and any rewards they may receive.

7. Compliance Limitations

Bastion may update its compliance processes as the platform evolves. Users are responsible for complying with laws applicable to them in their jurisdiction and in connection with each project or program they engage with.

References to platform features, ecosystems, or workflows do not constitute a representation that Bastion or any user is compliant with a specific legal, regulatory, or industry framework unless explicitly stated and verified for that deployment.

8. Contact

For legal or compliance questions, contact the Bastion team through the contact methods provided on the platform.