'%3e%3cpath%20d='M12.4997%201.33325C10.39%201.33325%208.32772%201.95884%206.5736%203.13091C4.81947%204.30298%203.4523%205.96888%202.64496%207.91796C1.83763%209.86704%201.62639%2012.0118%202.03797%2014.0809C2.44955%2016.15%203.46545%2018.0506%204.95721%2019.5424C6.44897%2021.0342%208.34959%2022.0501%2010.4187%2022.4616C12.4878%2022.8732%2014.6326%2022.662%2016.5816%2021.8546C18.5307%2021.0473%2020.1966%2019.6801%2021.3687%2017.926C22.5408%2016.1719%2023.1663%2014.1096%2023.1663%2011.9999C23.1663%209.17094%2022.0425%206.45783%2020.0422%204.45745C18.0418%202.45706%2015.3287%201.33325%2012.4997%201.33325ZM12.4997%2021.3333C10.6537%2021.3333%208.84922%2020.7859%207.31436%2019.7603C5.7795%2018.7347%204.58322%2017.2771%203.8768%2015.5716C3.17039%2013.8662%202.98555%2011.9896%203.34568%2010.1791C3.70581%208.36859%204.59473%206.70554%205.90002%205.40025C7.20531%204.09496%208.86835%203.20605%2010.6788%202.84592C12.4893%202.48579%2014.3659%202.67063%2016.0714%203.37704C17.7768%204.08346%2019.2345%205.27974%2020.2601%206.8146C21.2856%208.34945%2021.833%2010.154%2021.833%2011.9999C21.833%2014.4753%2020.8497%2016.8492%2019.0993%2018.5996C17.349%2020.3499%2014.975%2021.3333%2012.4997%2021.3333Z'%20fill='white'/%3e%3cpath%20d='M19.167%208.06667C19.042%207.9425%2018.8731%207.8728%2018.697%207.8728C18.5208%207.8728%2018.3519%207.9425%2018.227%208.06667L10.8269%2015.4333L6.82695%2011.4333C6.70495%2011.3016%206.53562%2011.2237%206.35621%2011.2169C6.1768%2011.21%206.00201%2011.2747%205.87028%2011.3967C5.73856%2011.5187%205.66069%2011.688%205.65382%2011.8674C5.64694%2012.0468%205.71162%2012.2216%205.83362%2012.3533L10.8269%2017.3333L19.167%209.01333C19.2294%208.95136%2019.279%208.87762%2019.3129%208.79638C19.3467%208.71514%2019.3642%208.62801%2019.3642%208.54C19.3642%208.45199%2019.3467%208.36485%2019.3129%208.28361C19.279%208.20237%2019.2294%208.12864%2019.167%208.06667Z'%20fill='white'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_2790_31187'%3e%3crect%20width='24'%20height='24'%20fill='white'%20transform='translate(0.5)'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
'%3e%3ccircle%20cx='60'%20cy='60'%20r='31.5'%20stroke='%23050505'%20stroke-width='3'/%3e%3ccircle%20cx='60'%20cy='60'%20r='23.5'%20stroke='%23050505'%20stroke-width='3'/%3e%3ccircle%20cx='60'%20cy='60'%20r='15.5'%20stroke='%23050505'%20stroke-width='3'/%3e%3c/g%3e%3cpath%20d='M21%2060H12'%20stroke='%23050505'%20stroke-width='3'/%3e%3cpath%20d='M108%2060H99'%20stroke='%23050505'%20stroke-width='3'/%3e%3cpath%20d='M42%2093.4119C52.8444%2086.257%2060%2073.9641%2060%2060V54.5'%20stroke='%23050505'%20stroke-width='3'/%3e%3cpath%20d='M78%2093.4119C67.1556%2086.257%2060%2073.9641%2060%2060V54.5'%20stroke='%23050505'%20stroke-width='3'/%3e%3ccircle%20cx='60'%20cy='38'%20r='16.5'%20stroke='%23050505'%20stroke-width='3'/%3e%3cpath%20d='M56%2022V19.2843C56%2013.9799%2053.8929%208.89286%2050.1421%205.14213L48%203'%20stroke='%23050505'%20stroke-width='3'/%3e%3cpath%20d='M90%2036V36C95.5228%2036%20100%2031.5228%20100%2026L100%2024'%20stroke='%23050505'%20stroke-width='3'/%3e%3cpath%20d='M30%2084V84C24.4772%2084%2020%2088.4772%2020%2094L20%2096'%20stroke='%23050505'%20stroke-width='3'/%3e%3cpath%20d='M30%2036V36C24.4772%2036%2020%2031.5228%2020%2026L20%2024'%20stroke='%23050505'%20stroke-width='3'/%3e%3cpath%20d='M90%2084V84C95.5228%2084%20100%2088.4772%20100%2094L100%2096'%20stroke='%23050505'%20stroke-width='3'/%3e%3cpath%20d='M64%2022V19.2843C64%2013.9799%2066.1071%208.89286%2069.8579%205.14213L72%203'%20stroke='%23050505'%20stroke-width='3'/%3e%3cpath%20fill-rule='evenodd'%20clip-rule='evenodd'%20d='M60%2030C55.01%2030%2050.615%2033.1733%2048%2038C50.615%2042.8267%2055.01%2046%2060%2046C64.99%2046%2069.385%2042.8267%2072%2038C69.385%2033.1733%2064.99%2030%2060%2030ZM60%2042.8C62.7112%2042.8%2064.9091%2040.651%2064.9091%2038C64.9091%2035.349%2062.7112%2033.2%2060%2033.2C57.2888%2033.2%2055.0909%2035.349%2055.0909%2038C55.0909%2040.651%2057.2888%2042.8%2060%2042.8Z'%20fill='%23050505'/%3e%3c/svg%3e)
Bug Bounty Programs 2025
Explore all HackenProof’s programs below or filter the tech stack you work best with: let the bug hunt begin!
Total bug bounty200+
In bounties paid out$15.737.700
Total received reports25 000+
Hidden Gems
Triaged by Hackenproof
Started date:22 Jun 2023
Last updated:19 Jun 2025
Scope review:31962
Paid$0
up to$22,500
Triaged by Hackenproof
Started date:25 Apr 2023
Last updated:01 Jul 2025
Scope review:40118
Paid$0
up to$10,000
Triaged by HackenproofStarted date:15 Jul 2024
Last updated:20 Jun 2025
Scope review:10850
Paid$0
up to$10,000
Triaged by HackenproofStarted date:18 Mar 2024
Last updated:15 Jul 2025
Scope review:33628
Paid$0
up to$700,000
Started date:16 Sep 2024
Last updated:12 Jun 2025
Scope review:26021
Paid$22,000
up to$250,000
Triaged by Hackenproof
Started date:01 Jul 2024
Last updated:01 Jul 2025
Scope review:21829
Paid$0
up to$5,000
Triaged by Hackenproof
Started date:30 Jul 2024
Last updated:01 Jul 2025
Scope review:10152
Paid$100
up to$5,000
Triaged by Hackenproof
Started date:14 Mar 2025
Last updated:10 Jul 2025
Scope review:10950
Paid$0
up to$10,000
Triaged by Hackenproof
Started date:27 Mar 2025
Last updated:08 Jul 2025
Scope review:15348
Paid$0
up to$100,000
Triaged by Hackenproof
Started date:13 Jun 2025
Last updated:01 Jul 2025
Scope review:8235
Paid$0
up to$15,000
Added: Oldest to Newest
Added: Newest to Oldest
Updated at: Oldest to Newest
Updated at: Newest to Oldest
Max Bounties: Low to High
Max Bounties: High to Low
254 Results
Triaged by Hackenproof
This bug bounty program is focused on smart contracts and decentralised applications in Cronos blockchain with the emphasis on any vulnerabilities causing unintentional withdrawal/draining of funds/loss of user funds. The program covers key projects in the Cronos ecosystem, including VVS Finance, Tectonic, and other DeFi projects. Cronos is the EVM chain running in parallel to the Cronos POS Chain (https://cronos-pos.org). It aims to massively scale the DeFi and decentralised application (DApp) ecosystem, by providing developers with the ability to instantly port apps from Ethereum and EVM-compatible chains.Started date: 28 Mar 2024Last updated: 12 Jun 2025Scope review: 30088
up to $250,000
Triaged by Hackenproof
This bug bounty program is focused on Cronos (blockchain) with the emphasis on any vulnerabilities causing unintentional withdrawal/draining of funds/loss of user funds. Cronos is the Ethereum Virtual Machine (EVM) chain running in parallel to the Cronos POS Chain (https://cronos-pos.org). It aims to massively scale the DeFi and decentralised application (DApp) ecosystem, by providing developers with the ability to instantly port apps from Ethereum and EVM-compatible chains.Started date: 28 Mar 2024Last updated: 25 Jun 2025Scope review: 26399
up to $100,000
AirPuff revolutionizes the distribution and value realization from emerging Liquid Restaking and Restaking protocols, offering users an unprecedented opportunity to optimize their earnings. Started date: 04 Apr 2024Last updated: 12 Jun 2025Scope review: 25297
up to $25,000
AirPuff revolutionizes the distribution and value realization from emerging Liquid Restaking and Restaking protocols, offering users an unprecedented opportunity to optimize their earnings. Started date: 04 Apr 2024Last updated: 19 Mar 2025Scope review: 30047
up to $5,000
Triaged by Hackenproof
Shido Network is a leading Layer 1 Proof-of-Stake Network with high speed and infinite scalability.
Shido Network is built on Tendermint core and seamlessly interoperable with the Cosmos Ecosystem.
Leveraging both EVM and WASM execution we are enabling developers to choose environment.Started date: 23 Feb 2024Last updated: 12 Jun 2025Scope review: 22481
up to $10,000
Triaged by Hackenproof
Hidden Gem
MetaMask is a self-custodial wallet used to manage your identity, digital assets and explore web3.
This program covers Staking in [MetaMask Portfolio Validator Staking.](https://hackenproof.com/redirect?url=http://portfolio.metamask.io) Users stake 32 ETH and receive rewards in return.
Deposits, claiming rewards, requesting withdrawals, provisionsing/deprovisioning of validator keys by the operator, and dispatching of rewards/fees are all executed by/via the [Kiln On-Chain (v1) smart contracts ](https://hackenproof.com/redirect?url=http://github.com/kilnfi/staking-contracts) deployed without a proxy.Started date: 18 Mar 2024Last updated: 15 Jul 2025Scope review: 33628
up to $700,000
Triaged by Hackenproof
Towns Protocol is the foundation for decentralized, ownable spaces that empower communities.Started date: 05 Jun 2024Last updated: 26 May 2025Scope review: 29755
up to $50,000
Triaged by Hackenproof
A decentralized cloud for privacy and cost savings. Integrate global compute and storage resources & provide AI solutions to enhance business operations.Started date: 05 Mar 2024Last updated: 12 Jun 2025Scope review: 32395
up to $100,000
Triaged by HackenproofHidden Gem
INIT Capital is the money market that aims to democratize access to liquidity, catering not only to DeFi users but also to protocols through 'Liquidity Hooks'Started date: 15 Jul 2024Last updated: 20 Jun 2025Scope review: 10850
up to $10,000
Triaged by Hackenproof
INIT Capital is the money market that aims to democratize access to liquidity, catering not only to DeFi users but also to protocols through 'Liquidity Hooks'Started date: 15 Jul 2024Last updated: 19 Mar 2025Scope review: 8528
up to $100,000