Skip to content

Linux Foundation Decentralized Trust

Bug bounty on HackerOne lfdecentralizedtrust.org

Paused
Top reward
$2,000
Top severity paid
Critical
Assets in scope
26
Public CVEs
0
Last change
No changes yet

At a glance

What to know before you start testing.

Pays up to $2,000
for critical bugs.
Report on HackerOne
Submit through the program page.

Rewards

What HackerOne lists as the payout for each severity.

Severity Reward
Critical $2,000
High $1,500
Medium $500
Low $200

Scope

26 assets you may test, 41 excluded.

Source code 26

  • https://github.com/hyperledger/besu No bounty
  • https://github.com/hyperledger/besu-errorprone-checks No bounty
  • https://github.com/hyperledger/besu-native No bounty
  • https://github.com/hyperledger/besu-verkle-trie No bounty
  • https://github.com/hyperledger/fabric No bounty
  • https://github.com/hyperledger/fabric-admin-sdk No bounty
  • https://github.com/hyperledger/fabric-amcl No bounty
  • https://github.com/hyperledger/fabric-ca No bounty
  • https://github.com/hyperledger/fabric-chaincode-go No bounty
  • https://github.com/hyperledger/fabric-chaincode-java No bounty
  • https://github.com/hyperledger/fabric-chaincode-node No bounty
  • https://github.com/hyperledger/fabric-cli No bounty
  • https://github.com/hyperledger/fabric-config No bounty
  • https://github.com/hyperledger/fabric-contract-api-go No bounty
  • https://github.com/hyperledger/fabric-gateway No bounty
  • https://github.com/hyperledger/fabric-gateway-java No bounty
  • https://github.com/hyperledger/fabric-lib-go No bounty
  • https://github.com/hyperledger/fabric-private-chaincode No bounty
  • https://github.com/hyperledger/fabric-protos No bounty
  • https://github.com/hyperledger/fabric-protos-go No bounty
  • https://github.com/hyperledger/fabric-protos-go-apiv2 No bounty
  • https://github.com/hyperledger/fabric-samples No bounty
  • https://github.com/hyperledger/fabric-sdk-go No bounty
  • https://github.com/hyperledger/fabric-sdk-java No bounty
  • https://github.com/hyperledger/fabric-sdk-node No bounty
  • https://github.com/hyperledger/fabric-sdk-py No bounty
Out of scope (41)
  • https://github.com/hyperledger/blockchain-explorer
  • https://github.com/hyperledger/cello
  • https://github.com/hyperledger/cello-analytics
  • https://github.com/hyperledger/cello-k8s-operator
  • https://github.com/hyperledger/composer
  • https://github.com/hyperledger/composer-atom-plugin
  • https://github.com/hyperledger/composer-sample-applications
  • https://github.com/hyperledger/composer-sample-networks
  • https://github.com/hyperledger/composer-tools
  • https://github.com/hyperledger/composer-vscode-plugin
  • https://github.com/hyperledger/education
  • https://github.com/hyperledger/fabric-docs
  • https://github.com/hyperledger/fabric-docs-i18n
  • https://github.com/hyperledger/fabric-rfcs
  • https://github.com/hyperledger/fabric-test
  • https://github.com/hyperledger/fabric-test-resources
  • https://github.com/hyperledger/hyperledger
  • https://github.com/hyperledger/hyperledger.github.io
  • https://github.com/hyperledger/hyperledgerwp
  • https://github.com/hyperledger/indy-anoncreds
  • https://github.com/hyperledger/indy-crypto
  • https://github.com/hyperledger/indy-node
  • https://github.com/hyperledger/indy-plenum
  • https://github.com/hyperledger/indy-sdk
  • https://github.com/hyperledger/iroha
  • https://github.com/hyperledger/iroha-android
  • https://github.com/hyperledger/iroha-api
  • https://github.com/hyperledger/iroha-dotnet
  • https://github.com/hyperledger/iroha-ios
  • https://github.com/hyperledger/iroha-javascript
  • https://github.com/hyperledger/iroha-network-tools
  • https://github.com/hyperledger/iroha-python
  • https://github.com/hyperledger/iroha-scala
  • https://github.com/hyperledger/sawtooth-core
  • https://github.com/hyperledger/slack-archive
  • chat.hyperledger.org
  • identity.linuxfoundation.org
  • jira.hyperledger.org
  • lists.hyperledger.org
  • www.hyperledger.org
  • www.linuxfoundation.org

Changes

Tracked since 12 Nov 2026. Last checked 44 minutes ago.

No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.

Public CVEs

Published vulnerabilities in this vendor's products, from the NVD.

Search NVD

No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.