Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

SKALE Network bug bounty programs

skale.network Updated

SKALE Network runs one public program: a HackerOne bug bounty paying up to $50,000 (paused).

Top reward
Not published
Programs
1
1 pays cash
Targets in scope
4
1 type
Last change
None yet
Tracked since Nov 2026

Where to report

The one public program SKALE Network runs.

  • SKALE Network

    HackerOne · Bug bounty

    Paused

    Top reward

    $50k
    Critical
    $50k
    High
    $5,000
    Medium
    $2,500
    Low
    $100

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

What is in scope

4 targets. 3 excluded.

  • https://github.com/skalenetwork/libBLS

    Source code No bounty

  • https://github.com/skalenetwork/sgxwallet

    Source code No bounty

  • https://github.com/skalenetwork/skale-consensus

    Source code No bounty

  • https://github.com/skalenetwork/skale-manager/tree/develop/contracts

    Source code No bounty

No target matches. Try part of a host name, such as the company name.

Out of scope 3

Don't test these. A program can exclude a host another program covers; the program you report to decides.

  • *.skale.network

  • https://github.com/skalenetwork/skale-node-cli

  • https://github.com/skalenetwork/validator-cli

Recent changes

Reward and scope changes across every SKALE Network program, newest first.

No changes recorded yet. New targets and reward moves show up here and in the RSS feed.

Recent CVEs

Published vulnerabilities in SKALE Network products, from the NVD.

Search NVD
  • CVE-2023-36198 High

    Buffer Overflow vulnerability in skalenetwork sgxwallet v.1.9.0 allows an attacker to cause a denial of service via the trustedBlsSignMessage function.

  • CVE-2023-36199 High

    An issue in skalenetwork sgxwallet v.1.9.0 and below allows an attacker to cause a denial of service via the trustedGenerateEcdsaKey component.

  • CVE-2021-36219 Critical

    An issue was discovered in SKALE sgxwallet 1.58.3. The provided input for ECALL 14 triggers a branch in trustedEcdsaSign that frees a non-initialized pointer from the stack. An attacker can chain multiple enclave calls to prepare a stack that contains a valid address. This address is then freed, resulting in compromised integrity of the enclave. This was resolved after v1.58.3 and not reproducible

  • CVE-2021-36218 High

    An issue was discovered in SKALE sgxwallet 1.58.3. sgx_disp_ippsAES_GCMEncrypt allows an out-of-bounds write, resulting in a segfault and compromised enclave. This issue describes a buffer overflow, which was resolved prior to v1.77.0 and not reproducible in latest sgxwallet v1.77.0

About this page

This page gathers every public program listed under skale.network: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.

Something wrong or missing? Report a correction.