We welcome members of the Hedera developer community to review and contribute to the Hedera network services codebase.
If you find a non-sensitive bug or issue in any of the Hedera network services code, you can open a new issue to report it or submit a pull request to fix the bug yourself from within the network services GitHub repo. It’s important to the team that pull requests are very specific in scope and include a detailed description of what’s being committed.
If you've found a highly sensitive bug, we've created a bug bounty program which rewards researchers in hbars and encourages the discovery and reporting of serious vulnerabilities. Please send an email to security@hedera.com with a highly detailed description of what you’ve found. Hedera has set a period of three to six months to implement bug fixes. After we’ve fixed it, we’ll publicly announce the finder (unless you want to remain anonymous).
If you have a new feature request that you’d like to see as part of the Hedera services codebase, the Hedera improvement proposal (HIP) program continues to be open and we strongly recommend submitting your feature request there. The Hedera engineering team may not be able to respond to every community contribution, but we expect to learn and get better at accommodating these requests over time.