Skip to content

OKX

Bug bounty on HackenProof

Accepting reports CEX NFT Marketplace Web
Top reward
$1,000,000
Top severity paid
Critical
Assets in scope
8
Public CVEs
0
Last change

At a glance

What to know before you start testing.

Pays up to $1,000,000
for critical bugs.
Report on HackenProof
Submit through the program page.

Rewards

What HackenProof lists as the payout for each severity.

Severity Reward
Critical $1,000,000

Scope

8 assets you may test, 6 excluded.

Android apps 2

  • Android App
  • iOS App

Wildcard domains 1

  • *.okx.com

Products and areas 5

  • MacOS App
  • OKX Wallet Chrome Extension
  • OKX Wallet Edge Add-ons
  • OKX Wallet Safari Extension
  • WindowsOS App
Out of scope (6)
  • okx.ai
  • web3.okx.com/onchainos
  • agentic wallet
  • OKT Chain
  • https://github.com/okx/
  • *.okg.com

Changes

Tracked since 11 Nov 2026. Last checked 59 minutes ago.

No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.

Before we tracked it

Scope and reward changes recorded before this page started tracking it.

  1. Scope added

    https://web3.okx.com/onchainos (out of scope)

  2. Scope added

    okx.ai (out of scope)

  3. Scope added

    *.okg.com (out of scope)

  4. Scope added

    agentic wallet (out of scope)

Public CVEs

Published vulnerabilities in this vendor's products, from the NVD.

No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.