MetaMask bug bounty programs

MetaMask programs compared: top reward per severity, safe harbor, identity check, first response and status. Amounts are in the currency each program pays.

Program	Critical	High	Medium	Low	Top reward	Safe harbor	KYC	First response	Status
ME MetaMask HackerOne · Bug bounty	$50k	$15k	$1,250	$500	$50,000	–	–	4 hours average	Paused

• ME

  MetaMask

  HackerOne · Bug bounty

  Paused

  Top reward

  $50k

  Critical

  $50k

  High

  $15k

  Medium

  $1,250

  Low

  $500

  First response

  4 hours average

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

• api-wallet.web3auth.io

  Web Critical

• metamask.io

  Web Critical

• signature-insights.api.cx.metamask.io

  Web Critical

• snaps.metamask.io

  Web Critical

• wallet.web3auth.io

  Web Critical

• io.metamask

  Android No bounty

• io.metamask.Metamask

  iOS Critical

• https://metamask.github.io/phishing-warning/<vX.Y.Z>

  Products and areas Critical

• MetaMask Browser Extension

  Products and areas No bounty

• MetaMask SDK

  Products and areas No bounty

• mUSD Stablecoin

  Products and areas No bounty

• Snaps

  Products and areas No bounty

• Third Party Snaps

  Products and areas No bounty

No target matches. Try part of a host name, such as the company name.