logo

Bug Bounty Programs 2026

Explore all HackenProof’s programs below or filter the tech stack you work best with: let the bug hunt begin!

Total bug bounty350+
In bounties paid out$22 000 000+
Total received reports60 000+
arrowHidden Gems
Triaged by Hackenproof
LetsExchange Web & API & Widget: Swap, Bridge, DEX
up to$2,000
Started date:23 Jun 2023
Last updated:01 May 2026
Scope review:70199
Paid$1,800
up to$2,000
Triaged by Hackenproof
Toobit Web & Mobile
up to$10,000
Started date:18 Oct 2023
Last updated:01 May 2026
Scope review:40368
Paid$1,950
up to$10,000
Triaged by Hackenproof
Bitunix Web
up to$8,000
Started date:29 Mar 2024
Last updated:01 May 2026
Scope review:62534
Paid$26,675
up to$8,000
Biconomy Web & Mobile
up to$500
Started date:22 Jul 2024
Last updated:01 May 2026
Scope review:16707
Paid$3,170
up to$500
Triaged by Hackenproof
SafeSwap App
up to$2,000
Started date:20 Sep 2024
Last updated:01 May 2026
Scope review:21582
Paid$0
up to$2,000
Triaged by Hackenproof
Zoomex Web & Mobile
up to$10,000
Started date:27 Jun 2025
Last updated:01 May 2026
Scope review:40789
Paid$2,700
up to$10,000
Triaged by Hackenproof
NonKyc.io
up to$5,000
Started date:08 Jul 2025
Last updated:01 May 2026
Scope review:47719
Paid$4,145
up to$5,000
Triaged by Hackenproof
Haedal Smart Contracts
up to$200,000
Started date:25 Aug 2025
Last updated:01 May 2026
Scope review:38497
Paid$1,590
up to$200,000
Triaged by Hackenproof
Bucket Protocol Smart Contracts
up to$500,000
Started date:29 Aug 2025
Last updated:01 May 2026
Scope review:42860
Paid$3,500
up to$500,000
Gate US
up to$5,000
Started date:13 Jan 2026
Last updated:01 May 2026
Scope review:26781
Paid$250
up to$5,000
Added: Oldest to Newest
Added: Newest to Oldest
Updated at: Oldest to Newest
Updated at: Newest to Oldest
Max Bounties: Low to High
Max Bounties: High to Low
314 Results
Triaged by Hackenproof
program image
Cetus Web
Cetus is a pioneer DEX and concentrated liquidity protocol built on the Sui network. The mission of Cetus is building a powerful and flexible underlying liquidity network to make trading easier for any users and assets.
Started date: 08 Apr 2026Last updated: 08 Apr 2026Scope review: 13986
up to $10,000
Triaged by Hackenproof
program image
Ample Smart Contracts
A new way to compound onchain assets. Deposit supported assets, retain full principal ownership, and earn variable upside.
Started date: 01 Apr 2026Last updated: 02 Apr 2026Scope review: 15730
up to $20,000
Triaged by Hackenproof
program image
Dexalot Smart Contracts
Dexalot is a revolutionary non-custodial central limit order book dex aiming at bringing the traditional centralized exchange look and feel, through a decentralized on-chain application.
Started date: 24 Mar 2026Last updated: 22 Apr 2026Scope review: 24340
up to $100,000
Triaged by Hackenproof
program image
Lendvest Smart ContractsNEW
Lendvest is a non-custodial protocol enabling fixed term loans and automated staking for DeFi protocols.
Started date: 01 Oct 2026Last updated: 28 Apr 2026Scope review: 23161
up to $30,000
Triaged by Hackenproof
program image
AMLBot KYT Web
The AMLBot platform automates AML / KYC procedures and reduces compliance expenses
Started date: 20 Mar 2026Last updated: 20 Mar 2026Scope review: 14632
up to $1,500
Triaged by Hackenproof
program image
idOS Apps and SC
idOS (identity operating system) is a decentralized storage and access management network specifically designed to store user data.
Started date: 17 Mar 2026Last updated: 04 May 2026Scope review: 14896
up to $5,000
Triaged by Hackenproof
program image
PUMB Web
The First Ukrainian International Bank is one of the leading Ukrainian banks, largely owned by Rinat Akhmetov associated SCM Holdings.
Started date: 17 Mar 2026Last updated: 06 May 2026Scope review: 15959
up to $2,000
Triaged by Hackenproof
program image
Ember EVM Smart Contracts
One vault platform powering all strategies One liquidity layer connecting Web2 and Web3 One brand driving the next wave of tokenized assets This is Ember Protocol. Everything Vaults. Everything Liquidity.
Started date: 12 Mar 2026Last updated: 24 Mar 2026Scope review: 19932
up to $15,000
Triaged by Hackenproof
program image
NEAR Intents: Bridges
This bug bounty program covers the critical infrastructure powering NEAR Intents cross-chain capabilities, including the Multi-Party Computation (MPC) network for chain signatures and the bridge protocols enabling secure asset transfers across multiple blockchain networks. The scope includes: * MPC Network - Decentralized threshold signature generation for chain abstraction * Omni Bridge - Multi-chain asset bridge using Chain Signatures * Supporting SDKs, relayers, and smart contracts Treasuries in scope: https://docs.near-intents.org/near-intents/treasury-addresses
Started date: 03 Mar 2026Last updated: 30 Mar 2026Scope review: 27417
up to $100,000
Triaged by Hackenproof
program image
Multipli Smart Contracts
Multipli is a ZK-based yield protocol that enables yield generation on traditionally non-yield-bearing assets (XAUT, BTC, etc.) and boosts the yield efficiency of any asset by 4–12%. This bug bounty program focuses exclusively on on-chain smart contract code, including vault logic, financial computations, token accounting, upgrade paths, ZK-integrated contract logic, and overall protocol integrity. Researchers are invited to uncover vulnerabilities that may compromise fund safety, protocol correctness, or economic soundness.
Started date: 24 Feb 2026Last updated: 18 Mar 2026Scope review: 29105
up to $10,000