Bug Bounty Programs 2026

Whitechain is an EVM-compatible layer 1 blockchain platform built on top of the go-ethereum (go-eth) protocol and integrated into the WhiteBIT ecosystem - the biggest European crypto exchanges, founded back in 2018 in Ukraine. We prioritize safety, transparency, and constant development. Hence, over 8 million users choose us and stay with us. Blockchain is the future of technology, and we make this future available to everyone.

Started date:

30 Oct 2026

Last updated:

30 Oct 2026

Submissions:

54

Up to:

$10,000

Paid:

$0

Triaged by HackenProof

Rhea Finance is a DeFi protocol built on NEAR Protocol, providing decentralized trading, liquidity management, and yield farming services.

Started date:

25 Oct 2026

Last updated:

28 Oct 2026

Submissions:

108

Up to:

$250,000

Paid:

$0

Triaged by HackenProof

RedStone Is The Fastest Growing oracle, specialising in yield-bearing collateral for lending markets and securing $10bn+. Blue chip DeFi protocols are our clients including Spark, Morpho, Compound, Pendle, Venus, Lido, EtherFi, Ethena, Puffer, Balancer, Lombard, Enzyme, Frax, Agora, M^0 and 80+ other Clients. RedStone is also the official oracle provider for Securitize assets such as BUDIL (BlackRock), ACRED (Apollo) and others. RedStone provides a wide variety of in-demand assets such as LSTs, LRTs, Bitcoin LSTs and many others.

Started date:

22 Oct 2026

Last updated:

30 Oct 2026

Submissions:

204

Up to:

$250,000

Paid:

$0

Triaged by HackenProof

RedStone Is The Fastest Growing oracle, specialising in yield-bearing collateral for lending markets and securing $10bn+. Blue chip DeFi protocols are our clients including Spark, Morpho, Compound, Pendle, Venus, Lido, EtherFi, Ethena, Puffer, Balancer, Lombard, Enzyme, Frax, Agora, M^0 and 80+ other Clients. RedStone is also the official oracle provider for Securitize assets such as BUDIL (BlackRock), ACRED (Apollo) and others. RedStone provides a wide variety of in-demand assets such as LSTs, LRTs, Bitcoin LSTs and many others.

Started date:

22 Oct 2026

Last updated:

22 Oct 2026

Submissions:

39

Up to:

$10,000

Paid:

$0

Triaged by HackenProof

Current Finance is the capital market for global tokenized yield, connecting yield originators to on-chain liquidity — unlocking diversified, institutional-quality yield from real-world assets.

Started date:

22 Oct 2026

Last updated:

23 Oct 2026

Submissions:

60

Up to:

$15,000

Paid:

$0

Triaged by HackenProof

Built for people who want serious trading tools without the usual complexity.

Started date:

14 Oct 2026

Last updated:

28 Oct 2026

Submissions:

69

Up to:

$2,000

Paid:

$0

Triaged by HackenProof

This bug bounty program is focused on the Ult App and its supporting backend APIs, targeting vulnerabilities that directly lead to loss of user funds, breach of sensitive data (user's PII, clear transaction or payment details, internal data etc.), or unauthorized modification/deletion of data belonging to other users. Ult is a trading app built by Cronos Labs that brings crypto, perps, commodities and prediction markets into one account.

Started date:

28 Sep 2026

Last updated:

28 Sep 2026

Submissions:

102

Up to:

$20,000

Paid:

$0

Triaged by HackenProof

Global Crypto & TradFi Multi-Asset Trading Platform.

Started date:

14 Sep 2026

Last updated:

15 Oct 2026

Submissions:

30

Up to:

$2,000

Paid:

$100

Hinkal provides privacy infrastructure for stablecoin payments and on-chain financial operations, enabling users and businesses to transact without publicly exposing sensitive financial information such as balances, transaction amounts, and counterparties. The protocol uses zero-knowledge proofs to preserve transaction privacy while maintaining verifiable on-chain execution. This bounty program covers the core protocol smart contracts and the zero-knowledge circuits that gate fund movement. We are looking for critical vulnerabilities that could result in loss of user funds, unauthorized minting/withdrawal of shielded balances, bypass of proof verification, or breaks in the privacy guarantees the protocol is designed to provide.

Started date:

03 Sep 2026

Last updated:

17 Sep 2026

Submissions:

77

Up to:

$10,000

Paid:

$300

Triaged by HackenProof

Official Prediction Market Partner of the FIFA World Cup 2026™.

Started date:

13 Jul 2026

Last updated:

02 Oct 2026

Submissions:

45

Up to:

$10,000

Paid:

$0

Triaged by HackenProof