SAFETY & RULES
TopBid maintains strict platform security, automated SSRF protections, financial idempotency, and automated moderation to protect users and entries.
SSRF & DNS Security
All profile resolution requests undergo strict SSRF guard validation. Internal IPs (127.0.0.1, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) and cloud metadata endpoints are automatically blocked.
Open Redirect Prevention
Click tracking routes (/api/entries/[id]/click) strictly redirect users to the canonical primary URL stored in our database. Arbitrary external redirects are rejected.
Privacy-First View Tracking
TopBid tracks views using SHA-256 daily salt hashing (SHA256(IP + Date + Salt)). Raw IP addresses and user agents are never written to permanent storage.
Moderation & Suspension Isolation
Entries containing prohibited content, phishing, or malicious software are immediately suspended by moderators. Suspended entries are automatically isolated from all public leaderboards.