Introduction

WhiteHub is the first crowdsourced security platform in Vietnam that connects security researchers and businesses to pre-emptively seek out security vulnerabilities in technology products through Bug Bounty programs. More than a year after launch, WhiteHub has been used by over 1,500 security experts and 50 enterprises. With the aim of expanding WhiteHub to the community of experts and businesses around the world and improving WhiteHub’s application in the ecosystem of security products, we – the founders of the WhiteHub project – decided to apply blockchain technology on the reward and payment mechanism for security services and products on WhiteHub platform. This is why the WhiteHub Token (WHC) and the WHC ecosystem are developed.

WHC is a cryptocurrency built on the Ethereum Blockchain platform, with a vision of becoming the official currency in Bug Bounty programs, especially as a bounty payment method for security researchers. Taking advantage of Blockchain technology, WHC will facilitate a more efficient payment process, reduce costs, and enhance anonymity for users. At the same time, WHC helps lower barriers for researchers and businesses worldwide to join the WhiteHub community. In the future, WHC will be integrated into the security ecosystem of WhiteHub and our partners.

Moreover, WHC can and will serve as a channel through which the founding team shares the WhiteHub platform ownership to the community; in other words, investors can own WHC to receive benefits derived from this cryptocurrency as well as from the WhiteHub Platform.

WHC Token Issuer:

– Company name: WHITEHUB PTE. LTD.
– UEN: 202115951W
– Website: https://whitehub.net

WhiteHub & Bug Bounty

1. State of cybersecurity in businesses

Vulnerabilities are product security weaknesses that hackers can exploit to attack and perform malicious acts against users or issuers. Most businesses today encounter a major challenge: How to detect and fix security vulnerabilities in products BEFORE hackers exploit them.

To increase product safety, businesses need to find and fix all existing security vulnerabilities in products. Meanwhile, hackers need to find only a single vulnerability that can be exploited then make all efforts of the business go in vain. This situation is the motivation behind the development of the Crowdsourced Security method.

2. Crowdsourced Security

Crowdsourced Security is a method of enhancing the security of technology products (such as web apps, mobile apps, APIs, IoT devices, etc.) based on the contribution of the expert community (cybersecurity engineers, white-hat hackers, researchers). The experts will perform penetration tests to find out product vulnerabilities and businesses will pay rewards for valid detection.

By connecting with hundreds of independent security experts, Crowdsourced Security helps businesses find and fix security vulnerabilities as quickly as possible, reducing risks and ensuring product safety.

Bug Bounty Program

To use Crowdsourced Security, a business needs to implement a Bug Bounty program (in which the person who finds any valid security vulnerability gets paid). Here’s the standard procedure for executing a Bug Bounty program:

• Program launch: The business publishes a Bug Bounty program, with details of reward scope and reward amount for each severity level of vulnerabilities.
• Penetration test: Experts find and report vulnerabilities to the business.
• Triage: The business evaluates the validity and severity of reported vulnerabilities.
• Fix & reward: The business fixes vulnerabilities, re-tests and rewards experts.

3. WhiteHub security platform

Since launching in 2019, WhiteHub has been the first technology platform in Vietnam that pioneered Crowdsourced Security method. It responds to businesses’ needs of security testing by connecting with experts around the world. Via WhiteHub, businesses can create and manage their own Bug Bounty programs as well as reach out to a community of more than 1,500 security experts. The programs will include details of payment policies such as payment forms and amounts for experts with valid vulnerabilities detected.

Built and designed by top cybersecurity experts and software engineers in Vietnam, WhiteHub provides a full range of features and tools to help businesses organize a complete Bug Bounty program.

WhiteHub’s achievements

• 50+ programs created
• 1500+ researchers involved
• $200,000+ awarded to experts
• 2,000+ vulnerabilities detected

WhiteHub’s valued customers

Sign up and try it out at: https://whitehub.net

WHC Economy

WHC’s vision is to become a payment method for security products and services. 

In the first phase, WHC will be used on WhiteHub platform (whitehub.net) as a payment method based on which businesses can use to reward experts. Specifically, in Bug Bounty programs, instead of offering prizes in VND or USD, businesses will buy and use WHC to reward experts for the successful detection of valid vulnerabilities, making the payment process more convenient and transparent by removing barriers to experts’ participation in the programs.

In the next phase, WHC will replace cash in payment for other security products and services, especially SaaS products and borderless services. WHC  can also be used to create completely anonymous transactions.

Uses of WHC on WhiteHub platform

Participants:

• Businesses
• Security Researchers
• Investors
• Exchanges
• WhiteHub platform
• Security products

For businesses

To launch Bug Bounty programs, businesses need to own a corresponding amount of WHC and deposit it on the WhiteHub platform. WHC can be purchased through the WHC-listed exchanges with a market-determined rate. In addition, businesses can also use WHC to pay for products of third-party partners.

For security researchers

Joining WhiteHub, researchers will have the chance to receive WHC rewards from businesses for finding security vulnerabilities in products. Then,  researchers can hold WHC as an investment channel, stake in WHC pools to receive trading profits or sell directly on exchanges to earn stablecoin such as VNDC, USDT, USDC and other fiats.

For investors

Investors are individuals and organizations that believe in the development of WHC and of WhiteHub platform. Investors can own WHC as an investment channel: they can earn trading profits when WHC’s value increases corresponding to its wider application in security product ecosystems. In March 2021, we will use WHC on the CyStack platform (cystack.net), a security platform based on the SaaS model with many products for businesses. 

Meanwhile, WhiteHub will also share part of WhiteHub’s revenue to investors when they own a sufficient amount of WHC; this will be decided by the development team based on the actual business situation of WhiteHub and payments will be in stablecoins such as VNDC, USDT and USDC.

For exchanges

WHC-listed exchanges’ roles are to maintain WHC’s value, facilitate the interaction between buyers and sellers as well as provide liquidity to this cryptocurrency. In the short term, the WhiteHub development team and early investors will be in charge of WHC’s liquidity. In the long term, when WHC is widely used, market participants including experts, businesses, and investors will together maintain WHC’s liquidity and stability.

For WhiteHub platform

WhiteHub is the first platform to apply WHC in paying service fees between security experts and businesses. The use of WHC will facilitate a more efficient paying process, reduce costs, and increase anonymity of security experts who normally do not want their information to be public. This will also help WhiteHub to be welcomed by even more security experts around the world.

To increase scarcity and avoid inflation of WHC, WhiteHub will burn 20% of the fees that WhiteHub collects for each transaction carried out on the platform.

For third-party applications

Besides WhiteHub, other security applications or services can also use WHC to pay and/or interact with security experts and researchers worldwide.

Technical specifications

Name	WhiteHub
Ticker symbol	WHC
Type	Utility Token
Token symbol
Standard	ERC20
Smart contract	0xDDE5B33a56f3F1C22e5a6bd8429E6ad508BFF24E
Price	705 VNDC ($0.03 USDT)
Max supply	100,000,000 WHC

Roadmap

This roadmap is subject to changes made by the development team, based on the actual deployment progress and with the goal of increasing the number of WHC owners, the volume of WHC transactions on WhiteHub platform and thirty-party applications using WHC as a payment method.

WHC Distribution

WHC is built on the Ethereum (ERC20) platform, with a total supply of 100,000,000 WHC. This amount will be allocated as follows:

• 70% for Sale Service: This amount will be distributed to investors and businesses that need to deploy Bug Bounty programs on WhiteHub Platform through private sales channels and cryptocurrency exchanges.
• 20% for the Founding Team: 20 million WHC will be used as operating cost for WhiteHub platform and product development team. This amount will be locked in Smart Contract, and unlocked 2% every quarter from Q2 2021.
• 10% for Growth: This amount is used to implement marketing, sales, and community development programs on WhiteHub. This amount will be locked in Smart Contract, and unlocked 2% every quarter from Q1 2021.

WHC allocation in Smart contract is available at:

https://etherscan.io/token/0xDDE5B33a56f3F1C22e5a6bd8429E6ad508BFF24E#balances 

The Founding Team

Hoang Thao Marketing Executive of VNDC, enjoy reading, writing and sharing.