Bug Bounty Programs 2026

This bug bounty program is focused on the Ult App and its supporting backend APIs, targeting vulnerabilities that directly lead to loss of user funds, breach of sensitive data (user's PII, clear transaction or payment details, internal data etc.), or unauthorized modification/deletion of data belonging to other users. Ult is a trading app built by Cronos Labs that brings crypto, perps, commodities and prediction markets into one account.

Started date:

28 Sep 2026

Last updated:

28 Sep 2026

Submissions:

87

Up to:

$20,000

Paid:

$0

Triaged by HackenProof

Global Crypto & TradFi Multi-Asset Trading Platform.

Started date:

14 Sep 2026

Last updated:

14 Sep 2026

Submissions:

26

Up to:

$1,000

Paid:

$50

Hinkal provides privacy infrastructure for stablecoin payments and on-chain financial operations, enabling users and businesses to transact without publicly exposing sensitive financial information such as balances, transaction amounts, and counterparties. The protocol uses zero-knowledge proofs to preserve transaction privacy while maintaining verifiable on-chain execution. This bounty program covers the core protocol smart contracts and the zero-knowledge circuits that gate fund movement. We are looking for critical vulnerabilities that could result in loss of user funds, unauthorized minting/withdrawal of shielded balances, bypass of proof verification, or breaks in the privacy guarantees the protocol is designed to provide.

Started date:

03 Sep 2026

Last updated:

17 Sep 2026

Submissions:

77

Up to:

$10,000

Paid:

$0

Triaged by HackenProof

Official Prediction Market Partner of the FIFA World Cup 2026™.

Started date:

13 Jul 2026

Last updated:

02 Oct 2026

Submissions:

41

Up to:

$10,000

Paid:

$0

Triaged by HackenProof

Zynk is a just-in-time liquidity and settlement infrastructure layer for cross-border payment companies. Payment companies often need to pre-fund transactions to provide fast settlements — this ties up capital, slows growth, and makes treasury operations unnecessarily complex. Zynk removes that bottleneck by providing liquidity on a transaction-by-transaction basis, allowing companies to settle faster without locking up idle capital.

Started date:

06 Jul 2026

Last updated:

03 Oct 2026

Submissions:

16

Up to:

$5,000

Paid:

$0

Triaged by HackenProof

Staking on Starknet involves locking STRK tokens, and/or BTC wrappers in the staking protocol, in order to contribute to network security and performance. Users can either stake directly or delegate their tokens to others (BTC can only be delegated), with staking rewards based on their level of participation and contribution.

Started date:

01 Jul 2026

Last updated:

02 Jul 2026

Submissions:

52

Up to:

$100,000

Paid:

$0

Triaged by HackenProof

StarkNet is a validity rollup based on zk-STARK proofs. It operates as an L2 network over Ethereum, enabling any dApp to achieve scale for its computation – without compromising Ethereum's composability and security.

Started date:

01 Jul 2026

Last updated:

02 Jul 2026

Submissions:

31

Up to:

$250,000

Paid:

$0

Triaged by HackenProof

StarkNet is a validity rollup based on zk-STARK proofs. It operates as an L2 network over Ethereum, enabling any dApp to achieve scale for its computation – without compromising Ethereum's composability and security.

Started date:

01 Jul 2026

Last updated:

01 Oct 2026

Submissions:

95

Up to:

$250,000

Paid:

$11,000

Triaged by HackenProof

Arcadia is a non-custodial composable margin protocol on Base, Optimism, and Unichain for leveraged yield strategies on AMM liquidity positions.

Started date:

10 Jun 2026

Last updated:

30 Sep 2026

Submissions:

141

Up to:

$25,000

Paid:

$1,250

Triaged by HackenProof

Hyperbridge is a secure system that allows different blockchains to communicate with each other. This communication facilitates the transfer of assets on the blockchain. Unlike older methods that relied on groups of people (multisig committees) to approve transactions, Hyperbridge uses a more robust approach. It leverages the collective agreement of the entire network (consensus) and verifiable proofs (state proofs) to ensure that all communication is fully secure, just as if it were happening on a single blockchain. This decentralized method removes the main point of weakness that has led to billions of dollars in losses in the past. Hyperbridge is the first of its kind in the world.

Started date:

14 May 2026

Last updated:

24 Sep 2026

Submissions:

2439

Up to:

$50,000

Paid:

$163,000

Triaged by HackenProof