Quick Actions

Quick Actions are a feature we have created to help you review and validate bug reports. 

When you select a Quick Action, template text will be auto-populated for you in the 'Custom Reply' field and the status of the report will be updated (if applicable). This will allow you to quickly and effectively communicate with whitehats and advance reports through review stages until they are brought to resolution - either in a Closed or Paid status.

Quick Actions Categories

We have created categories for quick actions within the 'escalated' and 'confirmed' stages of a bug report. These categories help you determine which quick action will best apply to your individual report. Now you can move through a report with ease and efficiently bring it to a conclusion. 

 Advancing Through Reports with Quick Actions: 

Once a report has passed our 'automated filtering' and is escalated to you, it will appear in an Escalated status with the following message. From here, you should begin your Self Triaging of the report.

From the Escalated state, you can communicate to the whitehat and Immunefi, selecting on of the following Quick Action options:

If you choose the following option, the report will move to a `Closed` status: 

Once you have confirmed the validity of the bug and are ready to give an update to the whitehat and Immunefi, you will be presented with the following Quick Action options from the Confirmed status.

If you accidentally select the wrong category, you can simply click the back button on the top right corner of the menu. This will take you back to the category selection page. 

___________________________________________________________________________________

Please see the explanation below for when to use each of the Quick Action options. 

It is important to note that even if you have confirmed a vulnerability, you will need to choose a quick action that advances the report to a “Confirmed” status before you will be able to choose any Quick Actions that will lead you to the payment pathway.

I Want To…	Category	Quick Action(s)
Acknowledge the receipt of the report / Inform the whitehat that our team is  reviewing	Thanks for submitting. The report is in review.	No quick actions.
Mark as spam / invalid	The bug is invalid - we want to close it.	This bug is a duplicate of another. This bug is out of our bounty program’s scope. This bug is spam. Close it. This bug is expected behavior. Close it.
Mark as out-of-scope of  our program in terms of the selected impact, asset, and/or severity level selected	The bug is invalid - we want to close it.	This bug is a duplicate of another. This bug is out of our bounty program’s scope. This bug is spam. Close it. This bug is expected behavior. Close it.
Ask the whitehat for more information	We need to ask for more information.	We need more information to assess the validity. Needs more information - the POC is incomplete. Needs more information - incomplete impact.
Confirm the vulnerability, however, I need to lower the severity level	The bug is valid! Inform the whitehat.	Bounty has been paid out! This bug is valid! We are going to start working on a fix. This bug is valid and in scope. We are ready to pay! This bug is valid and in scope, but we want to lower the severity.
Confirm the vulnerability and pay the whitehat	The bug is valid! Inform the whitehat.	This bug is valid and in scope. We are ready to pay! Once you select this option, you will be provided a template. After you fill it out with the necessary transaction info and send it, the report status will be updated to "Paid."