Avalanche

The Avalanche Websites and APIs (formerly Avalanche General) bug bounty program covers our Web 2.0 internet-facing applications and infrastructure. Hacker Update: As of April 7 we will not accept new sub-domain takeover vulnerabilities until further notice.

Avalanche is an open-source platform for launching highly decentralized applications, new financial primitives, and new interoperable blockchains. The Avalanche Protocol bug bounty program covers the official Avalanche client (AvalancheGo) and related components. Please note: In cases where a size the reward exceeds an equivalent of 10,000 USD, Avalanche is entitled to make the payment in one-year locked AVAX at the rate calculated based on a weighted average price of AVAX during 90 calendar days preceding the date of the respective validated report.

The Avalanche Bridge (AB) connects directly to your wallet for fast, cheap, & secure transfers of Ethereum and Bitcoin assets to and from Avalanche. Note to hackers: Please only test on the testnet bridge at https://test.core.app/bridge (see program rules for details). Please note: In cases where a size the the reward exceeds an equivalent of 10,000 USD, Avalanche is entitled to make the payment in one-year locked AVAX at the rate calculated based on a weighted average price of AVAX during 90 calendar days preceding the date of the respective validated report.

Core is a set of free, non-custodial browser extension and mobile apps engineered for Avalanche users. The Core wallet brings Avalanche dApps, NFTs, bridges, Subnets, and more–directly to you. Please note: Until further notice, dependency takeovers issues are not accepted as part of this program.