Is CodeHawks a good place to start bug bounty hunting?

No program here lists a cash reward for Low-severity bugs and 35 of 45 can be read without an account.

CodeHawks bug bounty programs

Web3 Global Updated 15 minutes ago

CodeHawks is a Web3 bug bounty platform with 45 public programs; 0 (0%) pay cash, with a median top reward of $27.5k and a highest of $500k.

Time-boxed audit contests, not standing bounties.

Visit codehawks.cyfrin.io Browse all 45 programs

Public programs: 45
Median top reward: $27.5k
Highest reward: $500k

Is CodeHawks a good place to start?

What matters most when you are new: rewards for small bugs, open access and quick answers.

No program here lists a cash reward for Low-severity bugs.
35 of 45 can be read without an account.

What hunters should know

The usual complaints about bug bounty platforms, and what the data says here.

Identity checks (KYC)

8 require KYC before paying, 37 say they don't; the rest don't say.

Based on 45 programs No KYC
Fees and deposits

No program here lists a fee or deposit per report.

Based on 45 programs
Access

10 are invite only.

Based on 45 programs Open to anyone
Unclear scope

45 list no in-scope targets publicly: read the policy before testing.

Based on 45 programs

Highest-paying programs

See all

ZKsync: Era

$500k

Scope

–

First response

–

Top severity

–

Invite only
Beanstalk: Beanstalk: The Finale

$250k

Scope

–

First response

–

Top severity

–

No KYC
Chainlink: CCIP v1.5

$200k

Scope

–

First response

–

Top severity

–

Invite only
Vyper: Vyper - Compiler

$160k

Scope

–

First response

–

Top severity

–

No KYC Invite only
Beanstalk: Beanstalk Part 1

$100k

Scope

–

First response

–

Top severity

–

No KYC
Starknet: Staking Part 2

$80k

Scope

–

First response

–

Top severity

–

Invite only

All 45 programs on CodeHawks

Search and filter without leaving the page. Filters stay in the link, so you can share a view.

Sort

Filters

45 programs · Highest reward

Programs, highest reward first
Program	Scope	First response	Top reward
ZKsync: Era Invite only	–	–	$500,000
Beanstalk: Beanstalk: The Finale	–	–	$250,000
Chainlink: CCIP v1.5 Invite only	–	–	$200,000
Vyper: Vyper - Compiler Invite only	–	–	$160,000
Beanstalk: Beanstalk Part 1	–	–	$100,000
Starknet: Staking Part 2 Invite only	–	–	$80,000
Regnum Aurum Acquisition Corp: Core Contracts	–	–	$77,280
Zaros: Part 2	–	–	$70,000
Starknet: Staking Invite only	–	–	$65,000
ArkProject: ArkProject: NFT Bridge	–	–	$60,000
Zaros: Zaros Part 1	–	–	$60,000
Ditto: DittoETH	–	–	$55,000
Sablier	–	–	$53,440
Gamma: Liquidity Management	–	–	$50,000
Stakelink: Liquid Staking	–	–	$50,000
Cyfrin: CodeHawks Escrow Contract - Competition Details cyfrin.io	–	–	$40,000
Beanstalk: Beanstalk Part 2	–	–	$35,000
Steadefi	–	–	$35,000
Benqi: Ignite Invite only	–	–	$33,750
Biconomy: Biconomy: Nexus	–	–	$30,000
Tadle	–	–	$27,750
stake.link stake.link	–	–	$27,500
TempleDAO: TempleGold	–	–	$25,000
MorpheusAI	–	–	$22,500
Beanstalk: Beanstalk Part 3	–	–	$21,000
Swan: Dria	–	–	$21,000
BeedleFi: Beedle - Oracle free perpetual lending	–	–	$20,000
Fjord: Fjord Token Staking	–	–	$20,000
Sablier: Flow	–	–	$20,000
The Standard	–	–	$20,000
CodeFox Inc.: Sparkn	–	–	$15,000
Cyfrin: Foundry DeFi Stablecoin CodeHawks Audit Contest cyfrin.io	–	–	$15,000
Cyfrin: TSender cyfrin.io	–	–	$15,000
DIVA: Aave DIVA Wrapper	–	–	$15,000
Moonwell	–	–	$15,000
One World: Project	–	–	$15,000
Beanstalk: Beanstalk: Dive Into Basin	–	–	$12,000
Cyfrin: Cyfrin Attester cyfrin.io Invite only	–	–	$6,000
Remora: RWA Invite only	–	–	$6,000
Remora: RWA Part 2 Invite only	–	–	$4,000
Open Eden: USDO/CCIP Invite only	–	–	$3,200
Alchemix: Alchemix Transmuter	–	–	OP 16,653
Curve: Storage Proofs	–	–	OP 14,723
Cyfrin: BattleChain Confidence Pools cyfrin.io	–	–	ETH 7.25
QuantAMM	–	–	OP 49,600

ZKsync: Era

$500k

Scope

–

First response

–

Top severity

–

Invite only
Beanstalk: Beanstalk: The Finale

$250k

Scope

–

First response

–

Top severity

–

No KYC
Chainlink: CCIP v1.5

$200k

Scope

–

First response

–

Top severity

–

Invite only
Vyper: Vyper - Compiler

$160k

Scope

–

First response

–

Top severity

–

No KYC Invite only
Beanstalk: Beanstalk Part 1

$100k

Scope

–

First response

–

Top severity

–

No KYC
Starknet: Staking Part 2

$80k

Scope

–

First response

–

Top severity

–

Invite only
Regnum Aurum Acquisition Corp: Core Contracts

$77.3k

Scope

–

First response

–

Top severity

–

No KYC
Zaros: Part 2

$70k

Scope

–

First response

–

Top severity

–

No KYC
Starknet: Staking

$65k

Scope

–

First response

–

Top severity

–

Invite only
ArkProject: ArkProject: NFT Bridge

$60k

Scope

–

First response

–

Top severity

–

No KYC
Zaros: Zaros Part 1

$60k

Scope

–

First response

–

Top severity

–

No KYC
Ditto: DittoETH

$55k

Scope

–

First response

–

Top severity

–

No KYC
Sablier

$53.4k

Scope

–

First response

–

Top severity

–

No KYC
Gamma: Liquidity Management

$50k

Scope

–

First response

–

Top severity

–

No KYC
Stakelink: Liquid Staking

$50k

Scope

–

First response

–

Top severity

–

No KYC
Cyfrin: CodeHawks Escrow Contract - Competition Details

cyfrin.io

$40k

Scope

–

First response

–

Top severity

–

No KYC
Beanstalk: Beanstalk Part 2

$35k

Scope

–

First response

–

Top severity

–

No KYC
Steadefi

$35k

Scope

–

First response

–

Top severity

–

No KYC
Benqi: Ignite

$33.8k

Scope

–

First response

–

Top severity

–

No KYC Invite only
Biconomy: Biconomy: Nexus

$30k

Scope

–

First response

–

Top severity

–

No KYC
Tadle

$27.8k

Scope

–

First response

–

Top severity

–

No KYC
stake.link

stake.link

$27.5k

Scope

–

First response

–

Top severity

–

No KYC
TempleDAO: TempleGold

$25k

Scope

–

First response

–

Top severity

–

No KYC
MorpheusAI

$22.5k

Scope

–

First response

–

Top severity

–

No KYC
Beanstalk: Beanstalk Part 3

$21k

Scope

–

First response

–

Top severity

–

No KYC
Swan: Dria

$21k

Scope

–

First response

–

Top severity

–

No KYC
BeedleFi: Beedle - Oracle free perpetual lending

$20k

Scope

–

First response

–

Top severity

–

No KYC
Fjord: Fjord Token Staking

$20k

Scope

–

First response

–

Top severity

–

No KYC
Sablier: Flow

$20k

Scope

–

First response

–

Top severity

–

No KYC
The Standard

$20k

Scope

–

First response

–

Top severity

–

No KYC
CodeFox Inc.: Sparkn

$15k

Scope

–

First response

–

Top severity

–

No KYC
Cyfrin: Foundry DeFi Stablecoin CodeHawks Audit Contest

cyfrin.io

$15k

Scope

–

First response

–

Top severity

–

No KYC
Cyfrin: TSender

cyfrin.io

$15k

Scope

–

First response

–

Top severity

–

No KYC
DIVA: Aave DIVA Wrapper

$15k

Scope

–

First response

–

Top severity

–

No KYC
Moonwell

$15k

Scope

–

First response

–

Top severity

–

No KYC
One World: Project

$15k

Scope

–

First response

–

Top severity

–

No KYC
Beanstalk: Beanstalk: Dive Into Basin

$12k

Scope

–

First response

–

Top severity

–

No KYC
Cyfrin: Cyfrin Attester

cyfrin.io

$6,000

Scope

–

First response

–

Top severity

–

Invite only
Remora: RWA

$6,000

Scope

–

First response

–

Top severity

–

Invite only
Remora: RWA Part 2

$4,000

Scope

–

First response

–

Top severity

–

Invite only
Open Eden: USDO/CCIP

$3,200

Scope

–

First response

–

Top severity

–

Invite only
Alchemix: Alchemix Transmuter

OP 16.7k

Scope

–

First response

–

Top severity

–

No KYC
Curve: Storage Proofs

OP 14.7k

Scope

–

First response

–

Top severity

–

No KYC
Cyfrin: BattleChain Confidence Pools

cyfrin.io

ETH 7.25

Scope

–

First response

–

Top severity

–

No KYC
QuantAMM

OP 49.6k

Scope

–

First response

–

Top severity

–

No KYC