Meet 1inch
1inch powers DeFi for 23M users with seamless, low-cost token swaps and $1B+ in daily trades. Its ecosystem includes a secure wallet, portfolio tracker, developer portal, and crypto debit card — all designed to make DeFi simple and accessible.
Check Out The Rewards
1inch has expanded its bug bounty program across five core components of its ecosystem. Each program features multi-tiered rewards, with critical findings eligible for payouts of up to $500,000.
If you find a vulnerability according to the bounty rules, 1inch will reward you:
- Smart Contracts: Up to $500,000
- Wallet: Up to $100,000
- Developer Portal: Up to $100,000
- dApp: Up to $50,000
- Infrastructure: Up to $20,000
Exact reward amounts depend on severity and impact.
Join The Bounty Hunt
There are 5 dedicated bug bounty programs live — each with its own scope and assets:
- Smart Contracts
- Wallet
- Developer Portal (APIs)
- dApp (Web/Mobile)
- Infrastructure & Social Media Accounts
Make sure your reports contain info about these incidents:
- Business logic issues
- Payments manipulation
- Access control issues (e.g., IDOR)
- Remote code execution (RCE)
- Injection vulnerabilities
- Supply chain attack
- Cryptographic vulnerabilities
- Any other vulnerability with a clear potential for loss (such vulnerabilities will be considered at our discretion)
All in-scope vulnerability reports must include a Proof of Concept (PoC) that demonstrates real-world impact. Submissions without a PoC will not be considered.
Once you’re ready, click here to join the bounty hunt!
