Bug Bounty Programs 2026

Explore all HackenProof’s programs below or filter the tech stack you work best with: let the bug hunt begin!

Total bug bounty350+
In bounties paid out$22 000 000+
Total received reports60 000+
arrowHidden Gems
Triaged by HackenProof
Started date:05 Nov 2021
Last updated:01 Jun 2026
Scope review:799529
Paid$8,000
up to$3,000
Triaged by HackenProof
Bitkub
up to$3,000
Started date:15 Nov 2021
Last updated:29 May 2026
Scope review:95756
Paid$16,095
up to$3,000
Triaged by HackenProof
Coinstore
up to$10,000
Started date:19 Feb 2022
Last updated:01 Jun 2026
Scope review:79366
Paid$4,700
up to$10,000
Triaged by HackenProof
MyEtherWallet
up to$3,000
Started date:21 Jun 2023
Last updated:29 May 2026
Scope review:49902
Paid$4,300
up to$3,000
Triaged by HackenProof
Slush Wallet
up to$30,000
Started date:16 Feb 2024
Last updated:01 Jun 2026
Scope review:42313
Paid$76,000
up to$30,000
Triaged by HackenProof
Started date:26 Mar 2024
Last updated:01 Jun 2026
Scope review:48695
PaidPrivate
up to$100,000
Triaged by HackenProof
Bluefin Web
up to$5,000
Started date:01 Jul 2024
Last updated:01 Jun 2026
Scope review:34543
Paid$0
up to$5,000
Started date:31 Jan 2025
Last updated:01 Jun 2026
Scope review:39303
Paid$1,000
up to$150,000
Triaged by HackenProof
Started date:17 Jul 2025
Last updated:29 May 2026
Scope review:45463
Paid$1,950
up to$5,000
Triaged by HackenProof
Started date:17 Sep 2025
Last updated:29 May 2026
Scope review:40701
Paid$0
up to$15,000
Added: Oldest to Newest
Added: Newest to Oldest
Updated at: Oldest to Newest
Updated at: Newest to Oldest
Max Bounties: Low to High
Max Bounties: High to Low
315 Results
Triaged by HackenProof
program image
ENDED
Slex Web
SLEX is a Global Cryptocurrency & Commodity Trading platform focused on the development and promotion of digital and blockchain-based asset trading.
Started date: 15 Apr 2024Last updated: 25 May 2026Submissions: 47
up to $500 Paid: 200
CEX
WEB
program imageThe Internet Computer is the world’s first web-speed, internet-scale public blockchain, developed by the DFINITY Foundation. The Internet Computer overcomes the limitations of traditional blockchains and smart contracts for better speed, storage costs, security, and scalability, offering Web2 performance on an infinite Web3 platform. As a 100% trustless network, the Internet Computer is the only public blockchain in the world that offers end-to-end decentralization and uses no centralized cloud nodes. The ICP.HUB AE is your regional gateway to the ICP Ecosystem. We are a community of Web3 enthusiasts, developers and entrepreneurs, expanding the footprint of the Internet Compute Protocol in the region. We are excited to be inviting you to ***Hack to the Future*** with us.
Started date: 11 Apr 2024Last updated: 25 May 2026Submissions: 1
up to $0 Paid: 0
WEB
program imageAssetMantle is an enterprise assetization infrastructure layer designed to tokenize and manage real-world assets (RWAs) across industries such as real estate, healthcare, finance, and ESG. It provides modular tools for enterprises to bring assets on-chain, enabling programmable ownership, liquidity, and efficiency that traditional systems cannot offer. With features like decentralized identity (SSI/DID), regulatory compliance, and cross-chain interoperability, AssetMantle facilitates seamless integration with existing enterprise systems. Its ecosystem includes MantleWallet, MantleExplorer, and MantlePlace for secure asset management and trading, while MantleWorks offers consultancy services for end-to-end enterprise adoption
Started date: 20 Feb 2023Last updated: 25 May 2026Submissions: 22
up to $1,000 Paid: 0
NFT MARKETPLACE
BLOCKCHAIN
GO
program imageThe RISC Zero zkVM is a verifiable computer that works like a real embedded RISC-V micro-processor, enabling programmers to write ZK proofs like they write any other code.
Started date: 28 Mar 2024Last updated: 27 May 2026Submissions: 123
up to $150,000 Paid: 68250
BLOCKCHAIN
APPS
RUST
Triaged by HackenProof
program imageThis bug bounty program is focused on Web in Cronos which will directly lead to loss of user funds, or breach of sensitive data, or deletion of site data.
Started date: 28 Mar 2024Last updated: 13 May 2026Submissions: 56
up to $2,500 Paid: 9438
DAPP
WEB
Triaged by HackenProof
program imageThis bug bounty program is focused on smart contracts and decentralised applications in Cronos blockchain with the emphasis on any vulnerabilities causing unintentional withdrawal/draining of funds/loss of user funds. The program covers key projects in the Cronos ecosystem, including VVS Finance, Tectonic, and other DeFi projects. Cronos is the EVM chain running in parallel to the Cronos POS Chain (https://cronos-pos.org). It aims to massively scale the DeFi and decentralised application (DApp) ecosystem, by providing developers with the ability to instantly port apps from Ethereum and EVM-compatible chains.
Started date: 28 Mar 2024Last updated: 13 May 2026Submissions: 123
up to $250,000 Paid: 0
DAPP
SMART CONTRACT
SOLIDITY
Triaged by HackenProof
program imageThis bug bounty program is focused on Cronos (blockchain) with the emphasis on any vulnerabilities causing unintentional withdrawal/draining of funds/loss of user funds. Cronos is the Ethereum Virtual Machine (EVM) chain running in parallel to the Cronos POS Chain (https://cronos-pos.org). It aims to massively scale the DeFi and decentralised application (DApp) ecosystem, by providing developers with the ability to instantly port apps from Ethereum and EVM-compatible chains.
Started date: 28 Mar 2024Last updated: 15 May 2026Submissions: 221
up to $100,000 Paid: 14680
L1/L2
BLOCKCHAIN
GO
Triaged by HackenProof
Hidden Gem
program imageZest Protocol is a Bitcoin lending protocol. Zest Protocol operates on-chain and is open-source. Zest Protocol exists to make Bitcoin productive. All of it. The protocol strives to create a vibrant borrowing and lending ecosystem around BTC the asset. For more information about Zest Protocol, please visit https://www.zestprotocol.com/. Zest Protocol provides rewards in USDC/T on Ethereum, denominated in USD. For more details about the payment process, please view the Rewards by Threat Level section further below.
Started date: 26 Mar 2024Last updated: 01 Jun 2026Submissions: Private
up to $100,000 Paid: Private
LENDING
SMART CONTRACT
CLARITY
Triaged by HackenProof
program imageMetaMask is a self-custodial wallet used to manage your identity, digital assets and explore web3. This program covers Staking in [MetaMask Portfolio Validator Staking.](https://hackenproof.com/redirect?url=http://portfolio.metamask.io) Users stake 32 ETH and receive rewards in return. Deposits, claiming rewards, requesting withdrawals, provisionsing/deprovisioning of validator keys by the operator, and dispatching of rewards/fees are all executed by/via the [Kiln On-Chain (v1) smart contracts ](https://hackenproof.com/redirect?url=http://github.com/kilnfi/staking-contracts) deployed without a proxy.
Started date: 18 Mar 2024Last updated: 15 May 2026Submissions: 248
up to $700,000 Paid: 0
STAKING
SMART CONTRACT
SOLIDITY
Triaged by HackenProof
program imageOn-chain options enabling volatility trading. Creators of the first Impermanent Gain options
Started date: 14 Mar 2024Last updated: 25 May 2026Submissions: 31
up to $75,000 Paid: 0
NFT MARKETPLACE
DEX
SMART CONTRACT
SOLIDITY