Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

Concrete

Bug bounty on Cantina

Accepting reports smart contract solidity source code
Go to program
Top reward
$250,000
Top severity paid
Critical
Assets in scope
22
Public CVEs
0
Last change

At a glance

What to know before you start testing.

Pays up to $250,000
for critical bugs, from $5,000.
Report on Cantina
Submit through the program page.

Rewards

What Cantina lists as the payout for each severity.

Severity Reward
Critical $250,000

Reward range in US dollars. Cantina's own page has the details.

Scope

22 assets you may test.

Smart contracts 19

  • https://etherscan.io/address/0x0265d73a8E61F698d8EB0dfeb91Ddce55516844C
  • https://etherscan.io/address/0x0Ab99bC0f3E2a29Eb3814B872e0653734eb3E88d
  • https://etherscan.io/address/0x14A905158aebcb44451857603006a7dc23B0D014
  • https://etherscan.io/address/0x4945172902bA94Bc1394782ED0c22e2FF7AE8F26
  • https://etherscan.io/address/0x4d575bF3d22c9cd34e4ac19084397d905741d195
  • https://etherscan.io/address/0x5442F3C0074E74DEc8a10eCc29f1BE6eA9813253
  • https://etherscan.io/address/0x6D7118B3c46d4AFaD9f89E1Af2b917FC2A790534
  • https://etherscan.io/address/0x775d9c510d8B7A4B76B7cd4325Deafa7a1CDc2b5
  • https://etherscan.io/address/0x7a9B29d90286387F6bB73472468D7FF53EBaD9b8
  • https://etherscan.io/address/0x86c81b3c29061369e5DCf6A4Af841B24DDd87F0A
  • https://etherscan.io/address/0xB74C14E8E5d9F5EB8C439c31a7699337B7b0556F
  • https://etherscan.io/address/0xb7602Daa32ed02a443d654d6E42b7001Bb42964c
  • https://etherscan.io/address/0xC132f52906e6604D26C800e6d9C58b0190A2C0dE
  • https://etherscan.io/address/0xd085333A4D673346D1Ff384594a6048ac1e56660
  • https://etherscan.io/address/0xE22e89083813AA3435E1cB0ce3c5830BB9C91E94
  • https://etherscan.io/address/0xE4560fF6fB17d6456Afed3A94c1fceDE1D8b6841
  • https://etherscan.io/address/0xecBE0ccAdE088B495591B098Dce598D830728e8a
  • https://etherscan.io/address/0xF886f89b37840ca4aDf7805BBE09730dBd16Bb1C
  • https://etherscan.io/address/0xfbf6a62429dD6203Fbda48dC2f3f95c77CC03cAf

Source code 3

  • https://github.com/Blueprint-Finance/concrete-asset-cx-bug-bounty
  • https://github.com/Blueprint-Finance/concrete-earn-v2-bug-bounty/tree/main/src
  • https://github.com/Blueprint-Finance/concrete-earn-v2-bug-bounty/tree/main/src/periphery

Changes

Tracked since 12 Nov 2026. Last checked 4 minutes ago.

No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.

History

Scope and reward changes recorded before this page started tracking it.

  1. Scope removed

    https://github.com/Blueprint-Finance/concrete-earn-v2-bug-bounty

  2. Scope added

    https://etherscan.io/address/0x6D7118B3c46d4AFaD9f89E1Af2b917FC2A790534

  3. Scope added

    https://etherscan.io/address/0x86c81b3c29061369e5DCf6A4Af841B24DDd87F0A

  4. Scope added

    https://etherscan.io/address/0xd085333A4D673346D1Ff384594a6048ac1e56660

  5. Scope added

    https://etherscan.io/address/0x4945172902bA94Bc1394782ED0c22e2FF7AE8F26

  6. Scope added

    https://etherscan.io/address/0xE22e89083813AA3435E1cB0ce3c5830BB9C91E94

  7. Scope added

    https://etherscan.io/address/0xfbf6a62429dD6203Fbda48dC2f3f95c77CC03cAf

  8. Scope added

    https://etherscan.io/address/0xecBE0ccAdE088B495591B098Dce598D830728e8a

  9. Scope added

    https://etherscan.io/address/0xC132f52906e6604D26C800e6d9C58b0190A2C0dE

  10. Scope added

    https://etherscan.io/address/0x775d9c510d8B7A4B76B7cd4325Deafa7a1CDc2b5

  11. Scope added

    https://etherscan.io/address/0x4d575bF3d22c9cd34e4ac19084397d905741d195

  12. Scope added

    https://etherscan.io/address/0xb7602Daa32ed02a443d654d6E42b7001Bb42964c

  13. Scope added

    https://etherscan.io/address/0x0Ab99bC0f3E2a29Eb3814B872e0653734eb3E88d

  14. Scope added

    https://etherscan.io/address/0xB74C14E8E5d9F5EB8C439c31a7699337B7b0556F

  15. Scope added

    https://etherscan.io/address/0x7a9B29d90286387F6bB73472468D7FF53EBaD9b8

  16. Scope added

    https://etherscan.io/address/0xF886f89b37840ca4aDf7805BBE09730dBd16Bb1C

  17. Scope added

    https://etherscan.io/address/0x14A905158aebcb44451857603006a7dc23B0D014

  18. Scope added

    https://etherscan.io/address/0x5442F3C0074E74DEc8a10eCc29f1BE6eA9813253

  19. Scope added

    https://github.com/Blueprint-Finance/concrete-asset-cx-bug-bounty

  20. Scope added

    https://github.com/Blueprint-Finance/concrete-earn-v2-bug-bounty/tree/main/src/periphery

  21. Scope added

    https://github.com/Blueprint-Finance/concrete-earn-v2-bug-bounty/tree/main/src

  22. Scope removed

    https://etherscan.io/address/0x6503de9FE77d256d9d823f2D335Ce83EcE9E153f

  23. Scope removed

    https://etherscan.io/address/0x5854C7693459c6E316A96565776B72d94eE0E5FD

  24. Scope added

    https://etherscan.io/address/0xE4560fF6fB17d6456Afed3A94c1fceDE1D8b6841

  25. Scope removed

    https://etherscan.io/address/0x4DeF5abCfBa7Babe04472EE4835f459DAf4bD45f

  26. Scope removed

    https://etherscan.io/address/0xb04e166Fd5D7078Bb7B3412406609Fd92855a08F

  27. Scope removed

    etherscan.io

  28. Scope removed

    app.concrete.xyz

  29. Scope removed

    https://etherscan.io/address/0x0265d73a8E61F698d8EB0dfeb91Ddce55516844C

Public CVEs

Published vulnerabilities in this vendor's products, from the NVD.

No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.