Public bug bounty programs

Every public bug bounty and vulnerability disclosure program we track, with what it pays, what is in scope and how fast it answers.

6,160 programs on 28 platforms · Updated 12 Nov 2026, 21:22 UTC

Sort

Filters

2,849 programs match · Highest reward

Programs, highest reward first
Program	Platform	Scope	First response	Top reward
Usual Labs	Sherlock	19	–	$16,000,000
Uniswap uniswap.org	Cantina	23	–	$15,500,000
Reserve Protocol Bug Bounty reserve.org	Cantina	232	–	$10,000,000
Sky sky.money New scope	Immunefi	258	–	$10,000,000 from $1,000
Usual - Fira UZR (Usual Zero Rate) module	Sherlock	9	–	$7,500,000
USDT0	Immunefi	32	–	$6,000,000 from $5,000
Apple Security Bounty apple.com	Self-hosted	3	–	$5,000,000
Coinbase base.org	Cantina	4	–	$5,000,000
GMX gmx.io	Immunefi	239	–	$5,000,000 from $1,000
Polymarket polymarket.com	Cantina	49	–	$5,000,000
Spark	Immunefi	276	–	$5,000,000 from $1,000
LayerZero layerzero.network New scope	Immunefi	9	–	$3,500,000 from $25k
Stargate stargate.finance New scope	Immunefi	4	–	$3,500,000 from $500
Olympus olympusdao.finance	Immunefi	70	–	$3,333,333
Chainlink chain.link	Immunefi	23	–	$3,000,000 from $100k
Ethena ethena.fi	Immunefi	22	–	$3,000,000 from $2,500
OpenSea Managed Bug Bounty Program opensea.io	Bugcrowd	11	–	$3,000,000 from $125
Aave V4	Sherlock	1	–	$2,500,000
Hyperlane hyperlane.xyz	Immunefi	215	–	$2,500,000 from $1,000
Morpho morpho.org New scope	Cantina	9	–	$2,500,000
Optimism optimism.io	Immunefi	34	–	$2,000,042 from $50
Arbitrum	Immunefi	174	–	$2,000,000 from $1,000
Gnosis Chain gnosis.io	Immunefi	7	–	$2,000,000 from $1,000
Lido lido.fi	Immunefi	29	–	$2,000,000 from $500
Pendle Bounty pendle.finance	Cantina	32	–	$2,000,000
Rhino.fi rhino.fi	Immunefi	9	–	$2,000,000 from $1,000
Android and Google Devices Security Rewards google.com	Self-hosted	8	–	$1,500,000
Euler-Bounty euler.finance New scope	Cantina	16	–	$1,500,000
Ondo Perps ondoperps.xyz	Cantina	3	–	$1,500,000
0x 0x.org	Immunefi	5	–	$1,000,000 from $500
AAVE aave.com	Immunefi	105	–	$1,000,000 from $1,000
Across Protocol across.to	Self-hosted	3	–	$1,000,000 from $250
BitDelta bitdelta.com	HackenProof	3	–	$1,000,000
Bitget bitget.com	BugRap	6	–	$1,000,000
Cap	Sherlock	1	–	$1,000,000
CapyFi capyfi.com	Immunefi	10	–	$1,000,000 from $1,000
Cetus Smart Contracts	HackenProof	2	–	$1,000,000
Coinbase coinbase.com	Self-hosted	2	–	$1,000,000 from $1
Compound Finance	Immunefi	135	–	$1,000,000 from $1,000
CoW Protocol cow.fi	Immunefi	27	–	$1,000,000 from $1,000
Crypto.com crypto.com	HackerOne	24	–	$1,000,000
Dapper Labs dapperlabs.com	Self-hosted	7	–	$1,000,000
dYdX Bug Bounty	Cantina	11	–	$1,000,000
Ethereum Foundation Bug Bounty ethereum.org	Self-hosted	34	7 d	$1,000,000 from $2,000
Flying Tulip	Sherlock	18	–	$1,000,000
GMGN Web & Mobile gmgn.ai	HackenProof	4	–	$1,000,000
Immutable immutable.com	Immunefi	7	–	$1,000,000 from $1,000
Kamino New New scope	Sherlock	7	–	$1,000,000
Kiln V1 Bounty	Cantina	15	–	$1,000,000
kinetiq-contracts	Cantina	6	–	$1,000,000

Usual Labs

Sherlock

$16M

Scope

19

First response

–

Top severity

Critical
Uniswap

Cantina · uniswap.org

$15.5M

Scope

23

First response

–

Top severity

Critical
Reserve Protocol Bug Bounty

Cantina · reserve.org

$10M

Scope

232

First response

–

Top severity

Critical
Sky

Immunefi · sky.money

$10M
from $1,000

Scope

258

First response

–

Top severity

Critical

New scope No KYC
Usual - Fira UZR (Usual Zero Rate) module

Sherlock

$7.5M

Scope

9

First response

–

Top severity

Critical
USDT0

Immunefi

$6M
from $5,000

Scope

32

First response

–

Top severity

Critical
Apple Security Bounty

Self-hosted · apple.com

$5M

Scope

3

First response

–

Top severity

–
Coinbase

Cantina · base.org

$5M

Scope

4

First response

–

Top severity

Critical
GMX

Immunefi · gmx.io

$5M
from $1,000

Scope

239

First response

–

Top severity

Critical

No KYC
Polymarket

Cantina · polymarket.com

$5M

Scope

49

First response

–

Top severity

Critical
Spark

Immunefi

$5M
from $1,000

Scope

276

First response

–

Top severity

Critical

No KYC
LayerZero

Immunefi · layerzero.network

$3.5M
from $25k

Scope

9

First response

–

Top severity

Critical

New scope
Stargate

Immunefi · stargate.finance

$3.5M
from $500

Scope

4

First response

–

Top severity

Critical

New scope
Olympus

Immunefi · olympusdao.finance

$3.33M

Scope

70

First response

–

Top severity

Critical

No KYC
Chainlink

Immunefi · chain.link

$3M
from $100k

Scope

23

First response

–

Top severity

Critical
Ethena

Immunefi · ethena.fi

$3M
from $2,500

Scope

22

First response

–

Top severity

Critical
OpenSea Managed Bug Bounty Program

Bugcrowd · opensea.io

$3M
from $125

Scope

11

First response

–

Top severity

Critical

Safe harbor
Aave V4

Sherlock

$2.5M

Scope

1

First response

–

Top severity

Critical
Hyperlane

Immunefi · hyperlane.xyz

$2.5M
from $1,000

Scope

215

First response

–

Top severity

Critical
Morpho

Cantina · morpho.org

$2.5M

Scope

9

First response

–

Top severity

Critical

New scope No KYC
Optimism

Immunefi · optimism.io

$2M
from $50

Scope

34

First response

–

Top severity

Critical
Arbitrum

Immunefi

$2M
from $1,000

Scope

174

First response

–

Top severity

Critical
Gnosis Chain

Immunefi · gnosis.io

$2M
from $1,000

Scope

7

First response

–

Top severity

Critical

No KYC
Lido

Immunefi · lido.fi

$2M
from $500

Scope

29

First response

–

Top severity

Critical

No KYC
Pendle Bounty

Cantina · pendle.finance

$2M

Scope

32

First response

–

Top severity

–

Safe harbor No KYC
Rhino.fi

Immunefi · rhino.fi

$2M
from $1,000

Scope

9

First response

–

Top severity

Critical

No KYC
Android and Google Devices Security Rewards

Self-hosted · google.com

$1.5M

Scope

8

First response

–

Top severity

–
Euler-Bounty

Cantina · euler.finance

$1.5M

Scope

16

First response

–

Top severity

–

New scope
Ondo Perps

Cantina · ondoperps.xyz

$1.5M

Scope

3

First response

–

Top severity

Critical
0x

Immunefi · 0x.org

$1M
from $500

Scope

5

First response

–

Top severity

Critical
AAVE

Immunefi · aave.com

$1M
from $1,000

Scope

105

First response

–

Top severity

Critical
Across Protocol

Self-hosted · across.to

$1M
from $250

Scope

3

First response

–

Top severity

Critical
BitDelta

HackenProof · bitdelta.com

$1M

Scope

3

First response

–

Top severity

Critical
Bitget

BugRap · bitget.com

$1M

Scope

6

First response

–

Top severity

–
Cap

Sherlock

$1M

Scope

1

First response

–

Top severity

Critical
CapyFi

Immunefi · capyfi.com

$1M
from $1,000

Scope

10

First response

–

Top severity

Critical
Cetus Smart Contracts

HackenProof

$1M

Scope

2

First response

–

Top severity

Critical
Coinbase

Self-hosted · coinbase.com

$1M
from $1

Scope

2

First response

–

Top severity

–

Safe harbor
Compound Finance

Immunefi

$1M
from $1,000

Scope

135

First response

–

Top severity

Critical

Safe harbor
CoW Protocol

Immunefi · cow.fi

$1M
from $1,000

Scope

27

First response

–

Top severity

Critical
Crypto.com

HackerOne · crypto.com

$1M

Scope

24

First response

–

Top severity

Critical
Dapper Labs

Self-hosted · dapperlabs.com

$1M

Scope

7

First response

–

Top severity

–
dYdX Bug Bounty

Cantina

$1M

Scope

11

First response

–

Top severity

Critical
Ethereum Foundation Bug Bounty

Self-hosted · ethereum.org

$1M
from $2,000

Scope

34

First response

7 d

Top severity

–
Flying Tulip

Sherlock

$1M

Scope

18

First response

–

Top severity

Critical
GMGN Web & Mobile

HackenProof · gmgn.ai

$1M

Scope

4

First response

–

Top severity

Critical
Immutable

Immunefi · immutable.com

$1M
from $1,000

Scope

7

First response

–

Top severity

Critical
Kamino

Sherlock

$1M

Scope

7

First response

–

Top severity

Critical

New program New scope
Kiln V1 Bounty

Cantina

$1M

Scope

15

First response

–

Top severity

Critical
kinetiq-contracts

Cantina

$1M

Scope

6

First response

–

Top severity

Critical