Find vulnerabilities, earn TRAT rewards. Join the program that secures travel for millions.
Rewards, reporting and payouts at a glance.
The Tratok Bug Bounty is Tratok's security rewards program. Researchers who find and responsibly report vulnerabilities in the Tratok travel ecosystem earn TRAT, the Tratok token, based on the severity of each accepted report.
Rewards depend on severity: Critical 50,000 to 100,000 TRAT, High 25,000 to 50,000 TRAT, Medium 10,000 to 25,000 TRAT, Low 5,000 to 10,000 TRAT, and Info 1,000 to 5,000 TRAT per accepted report.
Create a free account, verify your email and add the ERC20 wallet that should receive rewards. Then submit a report with the affected page, clear steps to reproduce, the impact and screenshots. The security team reviews every submission.
In TRAT tokens, sent directly to the ERC20 wallet on your account once your report is accepted and rated.
One issue per report, a clear title, exact steps another person can follow, what an attacker could achieve, and evidence such as screenshots. Clear, reproducible reports are reviewed faster.
Three simple steps to start earning
Create your account, verify your email, and add your ERC20 wallet to receive bounty rewards.
Submit detailed vulnerability reports with screenshots. Our team reviews every submission carefully.
Receive TRAT token bounties based on severity, from 1,000 up to 100,000 TRAT per accepted report.
Bounties are assigned based on the severity and impact of each issue
All rewards are paid in TRAT tokens directly to your ERC20 wallet.
Join the Program
