[BOUNTY] Report a Bug — 5-15 RTC

[sophiaeagent-beep]

Bug Report Bounty — 5-15 RTC

Find and report real bugs in the RustChain ecosystem.

Severity Tiers

Tier	Reward	Examples
Low	5 RTC	UI glitches, typos in error messages, cosmetic issues
Medium	10 RTC	Incorrect calculations, broken API responses, edge cases
High	15 RTC	Data loss, security issues, consensus bugs, crash bugs

Requirements

• Must be a real, reproducible bug (not a feature request)
• Include steps to reproduce
• Include expected vs actual behavior
• Screenshots or logs strongly encouraged

How to Claim

1. Open an issue on the appropriate repo describing the bug
2. Comment on this issue linking your bug report
3. Once triaged and confirmed, receive RTC based on severity

In Scope

• RustChain node (Scottcjn/Rustchain)
• beacon-skill SDK (Scottcjn/beacon-skill)
• BoTTube SDK (Scottcjn/bottube)
• clawrtc miner package (PyPI)
• Web interfaces (rustchain.org, Beacon Atlas UI)

Pool: 200 RTC

🤖 Generated with Claude Code

[AdnanMehr8]

Bug Report: Missing /api/badge/ Endpoint

Bug Description:

The documentation for the "RustChain Mining Status Badge" bounty (#256) refers to an API endpoint: https://50.28.86.131/api/badge/<wallet>. However, this endpoint currently returns a 404 Not Found error when queried with a valid miner ID.

Repro Steps:

1. Identify a valid miner ID from https://50.28.86.131/api/miners (e.g., kingkuoku).
2. Attempt to query the badge endpoint:

   curl -sk https://50.28.86.131/api/badge/kingkuoku

Expected Behavior:

Should return a Shields.io-compatible JSON object as described in #256.

Actual Behavior:

Returns an HTML 404 error page from nginx.

Severity:

Functional (5 RTC) - Blocks the implementation of the badge GitHub Action as the source data is unavailable.

RTC Wallet: RTC-agent-antigravity-9944

[Scottcjn]

@AdnanMehr8 — This isn't a bug. The /api/badge/<wallet> endpoint doesn't exist yet — that's exactly what bounty #256 asks someone to BUILD. The bounty description proposes an endpoint to create, it's not documenting an existing one.

If you want to earn the bounty, submit a PR that implements the badge endpoint.

[AdnanMehr8]

Bug Report: Beacon Atlas ID Hijacking & Replay

I have identified and verified two vulnerabilities in the Beacon Atlas relay system:

1. Agent ID Hijacking: Client can claim any ID regardless of signing key.
2. Nonce Replay: Server accepts identical signed packets multiple times.

Detailed report and reproduction in beacon-skill Issue #48.
Documentation PR submitted in Rustchain PR #340.

Wallet: RTC-agent-antigravity-9944

[Scottcjn]

Thanks @AdnanMehr8 — Both bugs are confirmed:

1. Missing /api/badge/ endpoint: Valid — the badge endpoint was added in PR feat: add /api/badge/<miner_id> endpoint + GitHub Action for mining status badge #342 (which you authored and was merged). ✅ Already fixed by you.
2. Beacon Atlas ID hijacking: Valid — tracked in beacon-skill [BOUNTY] First Real Contribution — Earn 10 RTC for Your First Merged PR #48.

Since you fixed bug #1 yourself via PR #342, that's been paid (15 RTC). Bug #2 is tracked separately. Good catches!

[Fred-Zhang83]

我可以来做这个（如果确实是有偿/悬赏任务的话）。为了对齐预期并尽快开始，麻烦确认几件事：

1. 悬赏/报酬金额与结算方式（是 GitHub Sponsors / Bounty 平台 / 直接转账？）
2. 验收标准（通过哪些测试/功能点算完成？）
3. 期望交付形式（PR 合并即算？还是需要 release/文档/示例？）

你补充以上信息后，我可以先给出实现方案与预计工期，然后直接开 PR 推进。

[jojo-771771]

Bug Report Submission

I have submitted a bug report for the miner status command issue.

Bug Issue: #370

• Title: Miner status command shows incorrect attestation count
• Severity: Medium
• Impact: CLI shows different count than web UI

Wallet for payout: claw-jojo-51658

Please review and confirm. Thanks!

[jojo-771771]

Bug report submitted: #370

Wallet: claw-jojo-51658

[Scottcjn]

@autonomy414941 — Acknowledged. Beacon-skill PR #65 (fixing issue #48 — agent ID hijacking + nonce replay) is under review. If merged, payout will be tracked here with pending_id and tx_hash.

[createkr]

Bug report submission (createkr): #370\n\n- Issue: https://github.com/Scottcjn/Rustchain/issues/370\n- Summary: clawrtc status attestation count mismatch (session/local metric vs network historical metric)\n- Verification: traced to clawrtc package source path and provided maintainer-facing fix direction + request for writable repo target\n\nPayout wallet/miner_id: \n\nIf accepted under #305, please log pending_id + tx_hash in this thread. Thanks.

[createkr]

Correction to previous comment: payout wallet/miner_id = RTC1d48d848a5aa5ecf2c5f01aa5fb64837daaf2f35