Skip to content

Bug Bounty Page Refactor#17688

Merged
pettinarip merged 41 commits into
masterfrom
new-bounty
Mar 2, 2026
Merged

Bug Bounty Page Refactor#17688
pettinarip merged 41 commits into
masterfrom
new-bounty

Conversation

@fredrik0x
Copy link
Copy Markdown
Contributor

@fredrik0x fredrik0x commented Feb 28, 2026

Description

Fairly big refactor of bug bounty page to remove items and sections no longer relevant and add additional information

Preview link

https://deploy-preview-17688.ethereum.it/bug-bounty

wackerow and others added 30 commits January 27, 2026 10:14
# Conflicts:
#	src/intl/vi/page-developers-learning-tools.json
#	src/intl/vi/page-developers-local-environment.json
Fix 60 translation issues across 26 Vietnamese (vi) files including:
- EVM terminology: "Máy chủ ảo" → "Máy ảo" (virtual machine, not virtual server) across 14 files
- DAO term: "ẩn danh" → "tự trị" (autonomous, not anonymous)
- Ethereum genesis date: July 3 → July 30, 2015
- Semantic inversion: "tập trung hơn" → "phi tập trung hơn"
- Energy reduction stat: ~95.95% → ~99.95%
- Brand name typos: "Etherum", "Etherem" → "Ethereum"
- Technical typos: "Skating" → "Staking", "shardign" → "sharding", "tollups" → "rollups"
- Glossary consistency: "nốt" → "nút" (node), per vi-glossary-terms.json
- Broken HTML, stray escape characters, key-value misalignments

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Fix MDX compilation errors that broke the build for vi locale:
- creating-a-wagmi-ui-for-your-contract: misplaced backtick in JSX fragment example
- erc-721-vyper-annotated-code: double backtick causing <tên> to parse as JSX
- erc20-annotated-code: raw < in **<0.8.0** → **&lt;0.8.0** to match English source
- short-abi: missing closing backtick on opcode syntax line
- ethereum-forks: bare <CHAINID> → <code>CHAINID</code>, added missing <em> tags on 4 list items
- restaking: removed duplicate </a> closing tag
- zero-knowledge-proofs: fixed <AlertTitle> content indentation structure

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Document the full review and fix process for Crowdin Vietnamese import (PR #17176):
- Review methodology (5 parallel agents, quality scoring)
- 37 critical issues found and resolved (EVM terminology, DAO, semantic inversions)
- 7 MDX syntax errors diagnosed and fixed
- Key pitfalls (cascading MDX errors, VPS/EVM ambiguity, context limits)
- Prevention recommendations for future imports
- Community glossary reference table

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…ions

Fix 13 link issues across 4 JSON translation files where hrefs were
either replaced with Crowdin numbered placeholders, pointed to wrong
glossary targets, completely removed, or had malformed nested anchor tags.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Document the investigation methodology, root cause analysis, and
prevention strategies for Crowdin translation href corruption.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Gemini <gemini@google.com>
Co-authored-by: Gemini Pro <gemini@google.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Fix diacritical typos
- Standardize "mã thông báo" → "token" across web3, defi, security
- Fix giấy trắng → sách trắng (whitepaper self-reference)
- Fix broken HTML: missing </strong>, missing spaces before <strong>/<a>
- Reorder defi sections to match English source structure
- Normalize markdown table column widths in defi comparison table

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Remove the legacy `releasesData` named export from releases.tsx — it was
unused (all consumers use `getReleasesData(t)` directly) and logged
warnings for every translation key.

Replace the noisy CoinGecko `console.warn` in stablecoins page with a
silent comment since missing coins are expected behavior.
chore: remove unused releasesData export and CoinGecko logs
Add new bounty hunter 'Evgeny Legerov' - Low 1000 points
- Replace "ma thong bao" with "token" (16 files)
- Fix "not" -> "nut" for node terminology (8 files)
- Fix garbled text in merge/, pbs/, verkle-trees/
- Fix meaning inversion: centralization -> decentralization
- Fix factual errors: PoW->PoS validators, 2h->24h
- Fix deposit contract mistranslation (email->reveal)
- Fix "Relays" mistranslated as "Repeat"
- Fix diacritical errors changing word meanings

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: wackerow <54227730+wackerow@users.noreply.github.com>
The escapeMdxAngleBrackets regex was converting \<1 to
\&lt;1 (double-escaping). Added \\ to the negative
lookbehind so backslash-escaped angle brackets are left
intact. Fixed 7 affected files across vi, cs, fr, ru.
Added 2 unit tests for the backslash-escape case.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: wackerow <54227730+wackerow@users.noreply.github.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: wackerow <54227730+wackerow@users.noreply.github.com>
…08-vi

i18n: automated Crowdin translation import (vi)
Temporarily disable the BugBountyBanner by commenting it out on the
bug bounty page, as indicated by the existing comment suggesting it
should be uncommented when needed.
Replace all references to `bounty@ethereum.org` with a Google Form
link (https://forms.gle/Gnh4gzGh66Yc3V7G8) for bug submissions.

- Update validity description to point to the bug submission form
  instead of email and PGP key
- Remove mailto links from FAQ Q5 and update response time note to
  reflect increased AI submission volume (up to one week)
- Replace "email us" CTA with a "submit" link to the Google Form
- Swap `:email:` emoji for `:bug:` emoji in the contact section
- Remove FAQ Q1 and Q8 (PGP key instructions no longer relevant)
- Add new `not-included-li-9` exclusion list item
…erity content

Remove deprecated text sections from the bug bounty page, including
submission description, points, quality, and fix-related paragraphs.
Also strip severity list items, subheaders, and text fields from
BugBountyCards component and its data definitions, simplifying the
card structure across all severity levels (low, medium, high, critical).
Wrap the execution and consensus leaderboard containers in a `Flex`
component to display them side by side on large screens (`lg:flex-row`)
while stacking vertically on smaller screens (`flex-col`), improving
the layout and use of available space.
Move the "hunting rules" and "out-of-scope" sections to appear before
the severity qualifications section, rather than after BugBountyCards.
This improves the logical reading order of the bug bounty page.
Replace legacy `UnorderedList`/`ListItem` components with styled native
HTML list elements across the Bug Hunting Rules, Out of Scope, and
In Scope sections. Updates include:

- Numbered rule items with primary-colored badges
- Card-style bordered containers for scoped/out-of-scope lists
- Visual indicators (✕/✓) for exclusion/inclusion lists
- Improved typography using `text-body-medium` and spacing utilities
- Refactor repeated list items into mapped arrays for maintainability
Relocates the `id="leaderboard"` attribute from a list item (index 3)
to the leaderboard section `div` container, ensuring the anchor link
points to the correct and more semantically appropriate element.
@github-actions github-actions Bot added content 🖋️ This involves copy additions or edits translation 🌍 This is related to our Translation Program labels Feb 28, 2026
@netlify
Copy link
Copy Markdown

netlify Bot commented Feb 28, 2026

Deploy Preview for ethereumorg ready!

Name Link
🔨 Latest commit f02d3ba
🔍 Latest deploy log https://app.netlify.com/projects/ethereumorg/deploys/69a5c74a87ee710008fd38a3
😎 Deploy Preview https://deploy-preview-17688.ethereum.it
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
7 paths audited
Performance: 53 (🔴 down 7 from production)
Accessibility: 94 (🟢 up 1 from production)
Best Practices: 100 (no change from production)
SEO: 99 (no change from production)
PWA: 59 (no change from production)
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify project configuration.

Remove the `subHeader1`, `subHeader2`, and associated text elements
from the bug bounty card layout, simplifying the card structure to
only show the description and call-to-action button.
Restructure the bug bounty page by moving "Out of Scope" before
"Bug Hunting Rules" sections and wrapping both in styled card
containers with consistent border and background styling. Removes
the `max-w-[100ch]` width constraint and updates section containers
to use `flex-[1_1_100%]` with overflow handling for better layout
consistency.
- Replace `rounded` with `rounded-sm` and `border-border bg-background` with `border-solid bg-background-highlight` on "Out of Scope" and "Bug Hunting Rules" sections for visual consistency
- Revert inner rule list item background from `bg-background-highlight` back to `bg-background` to maintain correct contrast
- Fix grammar in `page-upgrades-bug-bounty-out-of-scope-footnote`: "help reaching out" → "help reach out"
pettinarip
pettinarip previously approved these changes Mar 2, 2026
@pettinarip pettinarip changed the base branch from dev to master March 2, 2026 17:17
@pettinarip pettinarip dismissed their stale review March 2, 2026 17:17

The base branch was changed.

@pettinarip pettinarip requested a review from asanso as a code owner March 2, 2026 17:17
Copy link
Copy Markdown
Member

@wackerow wackerow left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lgtm! Few small things I may look to patch to keep things design system aligned and minimize tech debt, but nothing that needs to block this if we're looking to get this in asap

@github-actions github-actions Bot added documentation 📖 Change or add documentation tooling 🔧 Changes related to tooling of the project labels Mar 2, 2026
@pettinarip pettinarip merged commit 239811f into master Mar 2, 2026
6 of 7 checks passed
@pettinarip pettinarip deleted the new-bounty branch March 2, 2026 17:30
@wackerow wackerow mentioned this pull request Mar 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

content 🖋️ This involves copy additions or edits documentation 📖 Change or add documentation needs translations tooling 🔧 Changes related to tooling of the project translation 🌍 This is related to our Translation Program

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants