What is DualDefense
DualDefense is a service that combines traditional security audit services with HackenProof crowdsourced audits, powered by the community. After your main audit, HackenProof bug hunters additionally review your code. If critical bugs are found during the Crowdsourced Audit period, rewards are covered by the DualDefense Flash Pool community of stakers, preventing costs from being shifted to the project.
Auditors, the community of stakers, and bug hunters — all working together to protect your systems. By participating in DualDefense, CoinEx ensures maximum protection for its platform and engages the security research community to identify vulnerabilities before they can affect users.
Last Audit
Since DualDefense Audit always follows the traditional audit, the last CoinEx audit has already been done by Hacken.
CoinEx Enters the DualDefense Arena
CoinEx is a global cryptocurrency exchange committed to making crypto trading easier.
Focus Area
This DualDefense is focused on Web and APPS. Here are the vulnerabilities in scope:
- Any vulnerability or chain of vulnerabilities that leads directly to unauthorized fund transfers, transaction tampering, and financial fraud leading to significant loss of user or platform funds.
- Any vulnerability or chain of vulnerabilities that leads directly to exposure of essential cryptographic secrets or unauthorized access to hot or cold wallets leading to asset loss.
- Any instance of Remote Code Execution (RCE) on in-scope Domains that allows arbitrary command execution, system compromise, and full application takeover.
Bounty Breakdown
As part of the DualDefense program, CoinEx will reward security researchers for discovering critical vulnerabilities that could put the system or its users at risk.
- Critical bugs: up to $44,800 per valid submission.
Other findings may be acknowledged, but rewards are reserved exclusively for critical issues.
How to Participate
DualDefense starts on May 31, 2025 and will run until June 27, 2025. CoinEx is already looking forward to your findings, so you can join the program and submit your reports here.

![[New Audit] Dexalot launches DualDefense Contest With Up to $7,000 on HackenProof](https://cdn.sanity.io/images/vu6c6tah/blog-data-prod/18fe47313e2809e6011322b7d159b9cd7eedcbc0-1024x574.png?auto=format&q=75&fit=crop&crop=focalpoint&w=416&h=216)
![[New Audit] Agent – X launches DualDefense Contest With Up to $10,000 on HackenProof](https://cdn.sanity.io/images/vu6c6tah/blog-data-prod/9e0de443c7c4ca09fbe571597d610f2ede02bc5b-1024x576.png?auto=format&q=75&fit=crop&crop=focalpoint&w=416&h=216)
![[New Audit] Tokenize.it launches DualDefense Contest With Up to $4,000 on HackenProof](https://cdn.sanity.io/images/vu6c6tah/blog-data-prod/77259bf6bc73d18467a384b263bf5c838fdd70fc-1024x576.webp?auto=format&q=75&fit=crop&crop=focalpoint&w=416&h=216)