Crypto Bug Bounty Programs 2026

Triaged by HackenProof

LIVE

Multipli is a Zk based yield protocol specifically designed for making yield on traditionally non-yield bearing assets (XAUT (tokenised Gold), BTC, etc) and also boosting yield bearing capacity of any asset by 4-12%.

Started date: 24 Feb 2026Last updated: 25 May 2026Submissions: 36

up to $2,000 Paid: 100

STAKING

WEB

Triaged by HackenProof

LIVE

NEAR Intents: SDK

NEAR Intents SDK is a TypeScript SDK for the NEAR Intents protocol, providing tools for intent execution, deposits, withdrawals, and cross-chain interactions across multiple blockchains. The SDK handles critical operations including: * Intent signing and submission to the Near Intents relayer network * Cross-chain withdrawals via multiple bridge implementations (Hot Bridge, PoA Bridge, Omni Bridge) * Fee estimation and validation * Asset identifier parsing and route detection * Various signatures support (NEP-413, ERC-191, etc) Repository: https://github.com/defuse-protocol/sdk-monorepo

Started date: 10 Feb 2026Last updated: 18 May 2026Submissions: 179

up to $20,000 Paid: 0

NEAR

BRIDGE

DEX

WALLET

DAPP

Triaged by HackenProof

LIVE

AlphaSec Web & Smart Contracts

Alpha Sec. is a high-performance orderbook DEX that brings centralized-level execution into a fully decentralized environment, without compromise.

Started date: 05 Feb 2026Last updated: 28 Jul 2026Submissions: 148

up to $10,000 Paid: 25600

DEX

WEB

SMART CONTRACT

SOLIDITY

ENDED

Mybucks.online Wallet Cracking Challenge

MyBucks.online is a seedless, disposable crypto wallet designed for speed and convenience that derives private keys directly from user-defined passphrase and PIN via Scrypt and Keccak-256. To battle-test our architecture, we’ve launched an open-entry Cracking Challenge. No registration, no permissions are required and everything is open-source.

Started date: 03 Feb 2026Last updated: 25 May 2026Submissions: 28

up to $1,100 Paid: 0

WALLET

WEB

JAVASCRIPT

Triaged by HackenProof

LIVE

Citrea Protocol & Smart Contracts

Citrea is the first rollup that enhances the capabilities of Bitcoin blockspace with zero-knowledge technology. Citrea is the only scalability solution that uses Bitcoin both as a data availability and a settlement layer, via its BitVM-based trust-minimized two-way peg program - Clementine. Citrea is fully EVM compatible, enabling all EVM developers to easily build on Bitcoin. For more information about Citrea, please visit https://citrea.xyz. Citrea provides rewards in USDC on Ethereum, denominated in USD. For more details about the payment process, please view the Rewards by Threat Level section further below.

Started date: 28 Jan 2026Last updated: 27 Jul 2026Submissions: 517

up to $250,000 Paid: 2100

L1/L2

SMART CONTRACT

BLOCKCHAIN

RUST

SOLIDITY

Triaged by HackenProof

LIVE

Citrea Web & Apps

Started date: 28 Jan 2026Last updated: 10 Jul 2026Submissions: 38

up to $25,000 Paid: 600

BRIDGE

INFRASTRUCTURE

WEB

APPS

Triaged by HackenProof

LIVE

CEX.IO Web & Mobile

A leading cryptocurrency ecosystem. Our Licenses & Registrations: https://cex.io/legal-security

Started date: 19 Jan 2026Last updated: 13 May 2026Submissions: 231

up to $500 Paid: 300

CEX

WEB

APPS

Triaged by HackenProof

Hidden Gem

LIVE

Monday Trade Web

Monday Trade is Monad’s native spot and perps DEX that offers the best of CEX and DEX trading experience. Monad’s low latency enables Monday Trade to execute trades within milliseconds, ensuring traders can make the most of market moves, without giving up their asset ownership to centralized exchanges. Monday Trade combines the precision of a fully on-chain order book with the simplicity of AMMs into one sleek UI, delivering gas-efficient, high-performance onchain trades with optional advanced trading tools.

Started date: 19 Jan 2026Last updated: 24 Jul 2026Submissions: 250

up to $3,000 Paid: 400

DEX

WEB

APPS

Triaged by HackenProof

PAUSED

Meest Poshta Mobile

Meest Poshta is a national logistics operator, particularly strong in door-to-door delivery within Ukraine. Meest Poshta offer a range of services, including parcel delivery, international freight forwarding, and logistics support for e-commerce. Meest Group, which includes Meest Poshta, also provides international money transfers and operates two international mail processing centers.

Started date: 15 Jan 2026Last updated: 27 May 2026Submissions: 16

up to $1,000 Paid: 4400

WEB2

APPS

Triaged by HackenProof

LIVE

Solv Smart Contracts

Solv Protocol is building the $1 trillion Bitcoin economy through a full-stack suite of financial services optimized for BTC holders. By enabling lending, liquid staking, yield generation, and fund management, Solv activates Bitcoin as a capital-efficient asset within a growing Bitcoin-native DeFi ecosystem. Supported by institutional partners and an on-chain BTC reserve, Solv bridges TradFi, CeFi, and DeFi, unlocking yield opportunities and expanding Bitcoin’s role in programmable finance. Users can access structured BTC financial products and generate yield within Solv’s Bitcoin-native economy, positioning Bitcoin as a productive asset and foundational layer of decentralized financial infrastructure. Backed by leading investors including Binance Labs, Blockchain Capital, Laser Digital, and OKX Ventures, and secured through comprehensive audits by Quantstamp, Certik, SlowMist, Salus, and Secbit, Solv brings institutional-grade trust to the future of Bitcoin finance.

Started date: 15 Jan 2026Last updated: 12 May 2026Submissions: 371

up to $50,000 Paid: 0

DEFI

SMART CONTRACT

RUST

Bug Bounty Programs 2026

Explore all HackenProof’s programs below or filter the tech stack you work best with: let the bug hunt begin!