Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

Mezo Bug Bounty

Bug bounty on Cantina

Accepting reports go javascript smart contract
Go to program
Top reward
$75,000
Top severity paid
Critical
Assets in scope
91
Public CVEs
0
Last change

At a glance

What to know before you start testing.

Pays up to $75,000
for critical bugs, from $10,000.
Report on Cantina
Submit through the program page.

Rewards

What Cantina lists as the payout for each severity.

Severity Reward
Critical $75,000

Reward range in US dollars. Cantina's own page has the details.

Scope

91 assets you may test.

Smart contracts 89

  • 0x0268ABa7FaB1ceC04ce557313C94D5832B407AA3
  • 0x03D9eb3bE969EC3c2D5b1A3BEeE918619fba2499
  • 0x04671C72Aab5AC02A03c1098314b1BB6B560c197
  • 0x04B94f55780682478c8D8329368AAAfD320F4D32
  • 0x06291b67e3d7660240ab44Afc9a708d82b976a8B
  • 0x075108F275Ed81c9CFc01065E6e50CEea81D6363
  • 0x0d4648a86F1cBe40086356f56e5c168bd01ecB76
  • 0x0Dd6d3CC015D700a5d738f35A2d643Fa8a9cbA41
  • 0x0E628A1C34c92F0aA85aF998814Ce4f03cAA5913
  • 0x147379A0174780570D07d70a14FB244EE5f2D786
  • 0x1661692b3FF5343B571C0c20B7A1afAFf615036A
  • 0x1Fc00Cf2113301Fdc2bc3C1f710dafE38c6b9125
  • 0x255e7CE3aBc1280891Cd74fdFb560a7C1708495E
  • 0x2Ba614a598Cffa5a19d683cDCA97bac3a49313d1
  • 0x2Bc442310e6684c678E7B8498EfA8Aa3CBd7c44B
  • 0x2C5e9aFBb670c4A61aC2DcAD62C258eE2391389a
  • 0x2CA0a2c31260CAB77e84FBeAD81082861ef66C4c
  • 0x2e6D2F2CaCC1d24F9f9358030674eB307397A6EB
  • 0x30019D85a86ABD3cDA1167F4C052690c32FBDEc2
  • 0x3012C2fE1240e3754E5C200A0946bb0E07474876
  • 0x3104CD8a4D84C8fc477308f70c06A936c3198d30
  • 0x37cDd11919ec3860eaD9efB8673d7476E5326225
  • 0x391EcC7ffEFc48cff41D0F2Bb36e38b82180B993
  • 0x3D4b1b884A7a1E59fE8589a3296EC8f8cBB6f279
  • 0x3EB418BdBE95b4b9cf465ecfBD8424685ACD1Bc1
  • 0x409968CA6AC3582742B74dd5606F8062ecC5a90b
  • 0x4150DcE1c6d013fa7EBaf4fFCd879D08daA0CCAd
  • 0x41c2444c78db856876c9cF089A13624e499698a6
  • 0x44b1bac67dDA612a41a58AAf779143B181dEe031
  • 0x48233cCC97B87Ba93bCA212cbEe48e3210211f03
  • 0x4a453700d157717Fe02fB62E7700ED7845048285
  • 0x4cc7d1a0bdB2EE51146687360Edc0B609f37760A
  • 0x4da9e77114EE66d64Ca9457DA1FcA94d4B06fB99
  • 0x4E56aF2d49D3D8F9a99155b31dd117ccDD545dC7
  • 0x509Bc221df2B83927c695FA0bb0f5B21053C874c
  • 0x560AC4Ea44Fb7EB2D4d3c00608CB1CAb2613d389
  • 0x5acC3E627AFCf6a9e51E82a879291Df68376d1c5
  • 0x5C6eF634e279a77D64E21d24B1A1BB4A5e59C5DA
  • 0x66Bff681611553b3204A226b2019ec621F39ffc3
  • 0x6a7CD8E1384d49f502b4A4CE9aC9eb320835c5d7
  • 0x6DCFA065e19367984155f1b050727777E301F8e7
  • 0x73245Eff485aB3AAc1158B3c4d8f4b23797B0e32
  • 0x7b7c000000000000000000000000000000000000
  • 0x7b7c000000000000000000000000000000000001
  • 0x7b7c000000000000000000000000000000000011
  • 0x7b7c000000000000000000000000000000000012
  • 0x7b7c000000000000000000000000000000000013
  • 0x7b7c000000000000000000000000000000000014
  • 0x7b7c000000000000000000000000000000000015
  • 0x7F8c3a8877368d6A3c727ca18661ec1D681F4365
  • 0x818f6CcFbEe90202B967567bCF2a5Fb9B73CFEcA
  • 0x819CfAdd7F5bc0854FA3B7F5749ea0410a943E5F
  • 0x823653873baAE20ffA458B61cEd01BA5e9b59539
  • 0x83FE469C636C4081b87bA5b3Ae9991c6Ed104248
  • 0x8994A26941239a756A48f097254cB930f5FB5e3D
  • 0x8C5DB4C62BF29c1C4564390d10c20a47E0b2749f
  • 0x8f11a90265f7a784B46fe326638Ec37a5CC29c33
  • 0x94AfB503dBca74aC3E4929BACEeDfCe19B93c193
  • 0xa0B1Dbe2BeF82e24Cfa385fFe626d3Bf32Ba5478
  • 0xaaC423eDC4E3ee9ef81517e8093d52737165b71F
  • 0xAc93A67f15342E8Ef611396B13919204c8799Cd4
  • 0xb0EE3a01d9134733155B28289c09f084Acca4F61
  • 0xb4D498029af77680cD1eF828b967f010d06C51CC
  • 0xB57ab578BF20b3e318f3EFAA587C51DBccE5df7a
  • 0xb58477e074265BdC7F7ca6100eD0f7De264F74A2
  • 0xB8dF0A949aC45ff8f401553A1dcb742Feb38E6D3
  • 0xb90fdAd3DFD180458D62Cc6acedc983D78E20122
  • 0xb91fBb559216683Aa2558596d96718407631E82d
  • 0xBB24AF5c6fB88F1d191FA76055e30BF881BeEb79
  • 0xBF51807ACb3394B8550f0554FB9098856Ef5F491
  • 0xC5a9D19BC7859E34fC6264aF996878736CEBc7D8
  • 0xc5aC5A8892230E0A3e1c473881A2de7353fFcA88
  • 0xC7a27D0FBe6e9E091442736B147f58C0D3a39327
  • 0xD267b3bE2514375A075fd03C3D9CBa6b95317DC3
  • 0xd3f6F147662Bf2943ca09ee16beDaEa28AE28788
  • 0xD60F5f641E68a0e2c9bab29e444B22507a0F8ECF
  • 0xdD468A1DDc392dcdbEf6db6e34E89AA338F9F186
  • 0xE4B5913C0c82dB2eFC553b95c0173efb90a07c8B
  • 0xE6F919e62c370Ef04EDF4cA5E2a901Ea1aa87085
  • 0xe99a9ad5Ed26BD30e4DB25397f378817e9b9515a
  • 0xe9dF296Bce3a30b9A1f30cEE53056fff7dDCE28B
  • 0xe9e697D49d47c7042e768177F42d5789666D99FA
  • 0xeA0597D3d44FF2ea1E4c35501e153f4C025e48d1
  • 0xeAAf2B9e90aA6400d83e07606F5F2A5432502216
  • 0xeB5a5d39dE4Ea42C2Aa6A57EcA2894376683bB8E
  • 0xee8287b903cbBa2DEa6a9CfDa296A05ADA1A6cEF
  • 0xF6680EA3b480cA2b72D96ea13cCAF2cFd8e6908c
  • 0xFa3e5daE706819B458522D1d6238348E4C56Bf77
  • 0xfc41E1AAe0e58E8bDC32e85d8C995A902FEdEb13

Source code 2

  • https://github.com/mezo-org/mezod
  • https://github.com/mezo-org/musd

Changes

Tracked since 12 Nov 2026. Last checked 7 minutes ago.

No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.

History

Scope and reward changes recorded before this page started tracking it.

  1. Scope added

    0xeAAf2B9e90aA6400d83e07606F5F2A5432502216

  2. Scope added

    0xC5a9D19BC7859E34fC6264aF996878736CEBc7D8

  3. Scope added

    0x5acC3E627AFCf6a9e51E82a879291Df68376d1c5

  4. Scope added

    0x30019D85a86ABD3cDA1167F4C052690c32FBDEc2

  5. Scope added

    0xb90fdAd3DFD180458D62Cc6acedc983D78E20122

  6. Scope added

    0x3D4b1b884A7a1E59fE8589a3296EC8f8cBB6f279

  7. Scope added

    0xe99a9ad5Ed26BD30e4DB25397f378817e9b9515a

  8. Scope added

    0x0d4648a86F1cBe40086356f56e5c168bd01ecB76

  9. Scope added

    0x2e6D2F2CaCC1d24F9f9358030674eB307397A6EB

  10. Scope added

    0x2CA0a2c31260CAB77e84FBeAD81082861ef66C4c

  11. Scope added

    0xB8dF0A949aC45ff8f401553A1dcb742Feb38E6D3

  12. Scope added

    0x41c2444c78db856876c9cF089A13624e499698a6

  13. Scope added

    0x147379A0174780570D07d70a14FB244EE5f2D786

  14. Scope added

    0xa0B1Dbe2BeF82e24Cfa385fFe626d3Bf32Ba5478

  15. Scope added

    0xAc93A67f15342E8Ef611396B13919204c8799Cd4

  16. Scope added

    0x4E56aF2d49D3D8F9a99155b31dd117ccDD545dC7

  17. Scope added

    0x48233cCC97B87Ba93bCA212cbEe48e3210211f03

  18. Scope added

    0x83FE469C636C4081b87bA5b3Ae9991c6Ed104248

  19. Scope added

    0xee8287b903cbBa2DEa6a9CfDa296A05ADA1A6cEF

  20. Scope added

    0x3104CD8a4D84C8fc477308f70c06A936c3198d30

  21. Scope added

    0x8994A26941239a756A48f097254cB930f5FB5e3D

  22. Scope added

    0x818f6CcFbEe90202B967567bCF2a5Fb9B73CFEcA

  23. Scope added

    0x509Bc221df2B83927c695FA0bb0f5B21053C874c

  24. Scope added

    0x0Dd6d3CC015D700a5d738f35A2d643Fa8a9cbA41

  25. Scope added

    0xe9dF296Bce3a30b9A1f30cEE53056fff7dDCE28B

  26. Scope added

    0xb4D498029af77680cD1eF828b967f010d06C51CC

  27. Scope added

    0x03D9eb3bE969EC3c2D5b1A3BEeE918619fba2499

  28. Scope added

    0x06291b67e3d7660240ab44Afc9a708d82b976a8B

  29. Scope added

    0xb0EE3a01d9134733155B28289c09f084Acca4F61

  30. Scope added

    0xC7a27D0FBe6e9E091442736B147f58C0D3a39327

  31. Scope added

    0x075108F275Ed81c9CFc01065E6e50CEea81D6363

  32. Scope added

    0x66Bff681611553b3204A226b2019ec621F39ffc3

  33. Scope added

    0xb91fBb559216683Aa2558596d96718407631E82d

  34. Scope added

    0x2Bc442310e6684c678E7B8498EfA8Aa3CBd7c44B

  35. Scope added

    0xE6F919e62c370Ef04EDF4cA5E2a901Ea1aa87085

  36. Scope added

    0xD60F5f641E68a0e2c9bab29e444B22507a0F8ECF

  37. Scope added

    0xe9e697D49d47c7042e768177F42d5789666D99FA

  38. Scope added

    0x7F8c3a8877368d6A3c727ca18661ec1D681F4365

  39. Scope added

    0x5C6eF634e279a77D64E21d24B1A1BB4A5e59C5DA

  40. Scope added

    0x6DCFA065e19367984155f1b050727777E301F8e7

Public CVEs

Published vulnerabilities in this vendor's products, from the NVD.

No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.