Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

Symbiotic Bug Bounty

By Symbiotic Bug bounty on Cantina symbiotic.fi

Accepting reports domain javascript python
Go to program
Top reward
$500,000
Top severity paid
Critical
Assets in scope
68
Public CVEs
0
Last change

At a glance

What to know before you start testing.

Pays up to $500,000
for critical bugs, from $5,000.
Report on Cantina
Submit through the program page.

Rewards

What Cantina lists as the payout for each severity.

Severity Reward
Critical $500,000

Reward range in US dollars. Cantina's own page has the details.

Scope

68 assets you may test.

Smart contracts 45

  • https://etherscan.io/address/0x161954842B7EA47CBd050cAb4875DAa4D6599476
  • https://etherscan.io/address/0x1e006130f9Cf60E9C64942cf468E78F2f2a0E3F2
  • https://etherscan.io/address/0x29300b1d3150B4E2b12fE80BE72f365E200441EC
  • https://etherscan.io/address/0x29F57Ed0f855f18AEc82146a0b7F15Cab66a1C8d
  • https://etherscan.io/address/0x3275aE068F4951e2e4d3Dca107a54E4c219b02e7
  • https://etherscan.io/address/0x41069A712FaCc421fE194cAa59667456863a780e
  • https://etherscan.io/address/0x42dD40dC2130c658AB32d9989FF8aBe6c36463c0
  • https://etherscan.io/address/0x4e6aE579b43B7DE1fc4CEd1DfB155714176c85fb
  • https://etherscan.io/address/0x58F61759D858EafD8F58e4926e251701F6495dbF
  • https://etherscan.io/address/0x5a0dC8e73d6846f12630b8f7D5197FA8Cf669cfe
  • https://etherscan.io/address/0x62a3BFF08b021bcd3AbAD49bf44F77e93A93f86A
  • https://etherscan.io/address/0x649527D74A660A7e4b3Ee0aBC332DdD44C1Feb0a
  • https://etherscan.io/address/0x685c2eD7D59814d2a597409058Ee7a92F21e48Fd
  • https://etherscan.io/address/0x6f80fd397120164e44d23B9334910C8dE41Ce4ce
  • https://etherscan.io/address/0x70bc72b19a554436459a2C6a9E88892AeD18685b
  • https://etherscan.io/address/0x7133415b33B438843D581013f98A08704316633c
  • https://etherscan.io/address/0x788823C9579A049D986eB76718bC758C0998594a
  • https://etherscan.io/address/0x7cd61e3364a84B7d50F0a42C6eb937A1F05A0254
  • https://etherscan.io/address/0x85FE1589DCf6D4Ff207c5fe21fd2e93A94d15F95
  • https://etherscan.io/address/0x89391B703223511796F0778F0838E68Da66D90Fb
  • https://etherscan.io/address/0x8F152FEAA99eb6656F902E94BD4E7bCf563D4A43
  • https://etherscan.io/address/0x985Ed57AF9D475f1d83c1c1c8826A0E5A34E8C7B
  • https://etherscan.io/address/0x98a6aAc642e8616514E19bE37557c08e77fcCbD8
  • https://etherscan.io/address/0x9983edCD02f57b8b94bD8dE9D18E614dFB964d6D
  • https://etherscan.io/address/0x99F2B89fB3C363fBafD8d826E5AA77b28bAB70a0
  • https://etherscan.io/address/0x9AB3d8eD871a0425Ec8d520cf62cf8D36bd7cBe3
  • https://etherscan.io/address/0xa74F3107c29D514084bA37BC0E7650cc55fc39E4
  • https://etherscan.io/address/0xAd817a6Bc954F678451A71363f04150FDD81Af9F
  • https://etherscan.io/address/0xAE5Bb0C1b2f5d8fc077b2451E23439Ed88c458cc
  • https://etherscan.io/address/0xAEb6bdd95c502390db8f52c8909F703E9Af6a346
  • https://etherscan.io/address/0xb361894bC06cbBA7Ea8098BF0e32EB1906A5F891
  • https://etherscan.io/address/0xB5eFf01403C0dD3aDa1010919791d6EB82F6a84C
  • https://etherscan.io/address/0xc23932C0b914790141cAB9Ceb21Aad648Ca53EEc
  • https://etherscan.io/address/0xC323B898d7E4105E3980082B74CC5D4602996B10
  • https://etherscan.io/address/0xc41b9c2300E444d7031EBDe8aE24e40C268FaE91
  • https://etherscan.io/address/0xc583e3E488C3CD8738850e2E7B19eF3f23e82e8A
  • https://etherscan.io/address/0xC773b1011461e7314CF05f97d95aa8e92C1Fd8aA
  • https://etherscan.io/address/0xD7dC9B366c027743D90761F71858BCa83C6899Ad
  • https://etherscan.io/address/0xDd649AdaB2e67cAdC2EC29d75ABe73f3Df08065c
  • https://etherscan.io/address/0xdF46E374C73907eC8537c35B302009F935a035cd
  • https://etherscan.io/address/0xe1986078E2A2cE0f8609410B33Fca1C1CbCCbb4E
  • https://etherscan.io/address/0xe7b6dafe6e5e3d6f7fa3ed7624633e4518b1bc54
  • https://etherscan.io/address/0xEF91D6730688b2966b959383A1B42Aa23130Aedf
  • https://etherscan.io/address/0xfe8cFC5Dbb9c77A32a5Eb77C17F0317593f2c133
  • https://etherscan.io/address/0xfeb871581c2ab2e1eee6f7ddc7e6246cfa087a23

Source code 21

  • https://github.com/symbioticfi/burners/blob/7e887e75beb17e0c2c4df8396ee58dd6e0dd853e/src/contracts/router/BurnerRouterFactory.sol
  • https://github.com/symbioticfi/burners/blob/7e887e75beb17e0c2c4df8396ee58dd6e0dd853e/src/contracts/router/BurnerRouter.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/DelegatorFactory.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/delegator/FullRestakeDelegator.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/delegator/NetworkRestakeDelegator.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/delegator/OperatorNetworkSpecificDelegator.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/delegator/OperatorSpecificDelegator.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/NetworkRegistry.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/OperatorRegistry.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/service/NetworkMiddlewareService.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/service/OptInService.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/SlasherFactory.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/slasher/Slasher.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/slasher/VetoSlasher.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/VaultConfigurator.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/VaultFactory.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/vault/Vault.sol
  • https://github.com/symbioticfi/core/blob/3b6add23921d89dc364458b94e1c35bfb6736e27/src/contracts/vault/VaultTokenized.sol
  • https://github.com/symbioticfi/periphery/blob/9cc6d3b6947dddadb66b2a9f8d8981c618be65e8/src/contracts/DefaultCollateralMigrator.sol
  • https://github.com/symbioticfi/rewards/blob/b5a1f5b46f33f31938fc0116086b3a75e748c8b1/src/contracts/defaultStakerRewards/DefaultStakerRewardsFactory.sol
  • https://github.com/symbioticfi/rewards/blob/b5a1f5b46f33f31938fc0116086b3a75e748c8b1/src/contracts/defaultStakerRewards/DefaultStakerRewards.sol

Domains 2

  • app.symbiotic.fi
  • symbiotic.fi

Changes

Tracked since 12 Nov 2026. Last checked 7 minutes ago.

No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.

History

Scope and reward changes recorded before this page started tracking it.

  1. Scope removed

    https://github.com/symbioticfi/metadata-mainnet

  2. Scope removed

    https://github.com/symbioticfi/metadata-validation-scripts

  3. Scope removed

    https://github.com/symbioticfi/burners/blob/7e887e75beb17e0c2c4df8396ee58dd6e0dd853e/src/contracts/burners/swETH_Burner.sol

  4. Scope removed

    https://etherscan.io/address/0x41f640B4F6a12170364589bCb3835DbE0C21C20B

  5. Scope removed

    https://github.com/symbioticfi/burners/blob/7e887e75beb17e0c2c4df8396ee58dd6e0dd853e/src/contracts/burners/ETHx_Burner.sol

  6. Scope removed

    https://etherscan.io/address/0x6D52fC402b2dA2669348Cc2682D85c61c122755D

  7. Scope removed

    https://github.com/symbioticfi/hooks/blob/5ab5848dac69190548e5f6f9ac648853d3480a86/src/contracts/networkRestakeDelegator/NetworkRestakeReset...

  8. Scope removed

    https://etherscan.io/address/0xdCaC890b14121FD5D925E2589017Be68C2B5B324

  9. Scope removed

    https://etherscan.io/address/0x8A76a3b791D9cfCD17304D31e04304A54Bf07845

  10. Scope removed

    https://github.com/symbioticfi/hooks/blob/71ea3cea348fc4407766181f2183fee137442c63/src/contracts/networkRestakeDelegator/NetworkRestakeRedis...

  11. Scope removed

    https://github.com/symbioticfi/hooks/blob/71ea3cea348fc4407766181f2183fee137442c63/src/contracts/fullRestakeDelegator/FullRestakeDecreaseHoo...

  12. Scope removed

    https://etherscan.io/address/0x89e3915c9eb07d1bff5d78e24b28d409dba9b272

  13. Scope removed

    https://etherscan.io/address/0x0786ef079A0Fc3A2D9e62bf2E8c7aeF86B62d70A

  14. Scope removed

    https://github.com/symbioticfi/hooks/blob/71ea3cea348fc4407766181f2183fee137442c63/src/contracts/networkRestakeDelegator/NetworkRestakeDecre...

  15. Scope removed

    https://etherscan.io/address/0x1aca33ae8f57e2cdadd0375875ae12fb08c54529

  16. Scope removed

    https://github.com/symbioticfi/burners/blob/7e887e75beb17e0c2c4df8396ee58dd6e0dd853e/src/contracts/burners/wstETH_Burner.sol

  17. Scope removed

    https://etherscan.io/address/0xcd669361d629380a70338d613d29c6f3a28a2b50

  18. Scope removed

    https://etherscan.io/address/0xe46d876BA2F3C991F3AC3321B8C0A1c323ef8bCf

  19. Scope removed

    https://etherscan.io/address/0x16BFD34813e0FDabaA7591075280e9939f82Aa08

  20. Scope removed

    https://github.com/symbioticfi/hooks/blob/5ab5848dac69190548e5f6f9ac648853d3480a86/src/contracts/operatorSpecificDelegator/OperatorSpecificR...

  21. Scope removed

    https://github.com/symbioticfi/rewards/blob/6cca0f6564bb2a9fbc61a546ddb54b0caf6fa788/src/contracts/defaultOperatorRewards/DefaultOperatorRew...

  22. Scope removed

    https://github.com/symbioticfi/rewards/blob/6cca0f6564bb2a9fbc61a546ddb54b0caf6fa788/src/contracts/defaultOperatorRewards/DefaultOperatorRew...

  23. Scope removed

    https://github.com/symbioticfi/rewards/blob/6cca0f6564bb2a9fbc61a546ddb54b0caf6fa788/src/contracts/defaultStakerRewards/DefaultStakerRewards...

  24. Scope removed

    https://github.com/symbioticfi/hooks/blob/5ab5848dac69190548e5f6f9ac648853d3480a86/src/contracts/fullRestakeDelegator/FullRestakeResetHook.s...

  25. Scope removed

    https://etherscan.io/address/0x290CAB97a312164Ccf095d75D6175dF1C4A0a25F

  26. Scope removed

    https://github.com/symbioticfi/burners/blob/7e887e75beb17e0c2c4df8396ee58dd6e0dd853e/src/contracts/burners/mETH_Burner.sol

  27. Scope removed

    https://etherscan.io/address/0xbe5821db563311750f6295e3cdb40abbdbff0c4b

  28. Scope removed

    https://github.com/symbioticfi/rewards/blob/6cca0f6564bb2a9fbc61a546ddb54b0caf6fa788/src/contracts/defaultStakerRewards/DefaultStakerRewards...

  29. Scope removed

    https://etherscan.io/address/0x919c4329ed4d4a72c72c126ff8ae351c1e7ce231

  30. Scope removed

    https://etherscan.io/address/0xCc7Fd9B9A37ba1e2b30243Ce5A52BDB1f56B006a

  31. Scope removed

    https://github.com/symbioticfi/burners/blob/7e887e75beb17e0c2c4df8396ee58dd6e0dd853e/src/contracts/burners/sfrxETH_Burner.sol

  32. Scope removed

    https://github.com/symbioticfi/hooks/blob/71ea3cea348fc4407766181f2183fee137442c63/src/contracts/operatorSpecificDelegator/OperatorSpecificD...

  33. Scope removed

    https://github.com/symbioticfi/hooks/blob/71ea3cea348fc4407766181f2183fee137442c63/src/contracts/networkRestakeDelegator/NetworkRestakeReset...

  34. Scope removed

    https://github.com/symbioticfi/hooks/blob/71ea3cea348fc4407766181f2183fee137442c63/src/contracts/fullRestakeDelegator/FullRestakeResetHook.s...

  35. Scope removed

    https://github.com/symbioticfi/burners/blob/7e887e75beb17e0c2c4df8396ee58dd6e0dd853e/src/contracts/burners/rETH_Burner.sol

  36. Scope removed

    https://github.com/symbioticfi/hooks/blob/71ea3cea348fc4407766181f2183fee137442c63/src/contracts/operatorSpecificDelegator/OperatorSpecificR...

  37. Scope removed

    https://github.com/symbioticfi/rewards

  38. Scope removed

    https://github.com/symbioticfi/core

  39. Scope removed

    https://github.com/symbioticfi/periphery

  40. Scope removed

    https://github.com/symbioticfi/burners

Public CVEs

Published vulnerabilities in this vendor's products, from the NVD.

Search NVD

No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.