[Now Public] LetsExchange has made the program publicly visible! Earn Up to $2,000 Reward Per Critical Vulnerability

Meet LetsExchange

LetsExchange is an instant exchange service, which supports the biggest number of coins and tokens in the market and has no mandatory account registration.

Check Out The Rewards

If you find a vulnerability according to the bounty rules, LetsExchange will reward you:

• Critical: $1,000 – $2,000
• High: $500 – $1,000
• Medium: $200 – $500
• Low: $100 – $200

Join The Bounty Hunt

There are 2 asset types to scope!

• Web
• API

Make sure your reports contain info about these incidents:

• Business logic issues
• Payments manipulation
• Remote code execution (RCE)
• Injection vulnerabilities (SQL, XXE)
• File inclusions (Local & Remote)
• Access Control Issues (IDOR, Privilege Escalation, etc)
• Leakage of sensitive information
• Server-Side Request Forgery (SSRF)
• Cross-Site Request Forgery (CSRF)
• Cross-Site Scripting (XSS)
• Directory traversal
• Other vulnerability with a clear potential loss

Once you’re ready, click here to join the bounty hunt!