Crypto Bug Bounty Programs 2025

Triaged by Hackenproof

DeXe Protocol Smart Contracts

Is an innovative infrastructure of 50+ smart contracts for building and governing effective DAOs.

Started date: 15 Jan 2024Last updated: 12 Jun 2025Scope review: 29659

up to $500,000 Paid: 0

Triaged by Hackenproof

Superposition Finance Web

As a cutting-edge decentralized finance borrowing and lending protocol, our top priority is maintaining the security and integrity of user assets and operations. We invite ethical hackers, security researchers, and cybersecurity enthusiasts to test our systems and help us identify potential vulnerabilities. Our bug bounty program is focused on identifying critical to low impact vulnerabilities that could potentially threaten the stability, security, and functionality of our protocol. By participating, you help safeguard the assets and operations of our users and enhance the resilience of our platform.

Started date: 03 May 2024Last updated: 26 May 2025Scope review: 22050

up to $20,000 Paid: 100

AirPuff Web

AirPuff revolutionizes the distribution and value realization from emerging Liquid Restaking and Restaking protocols, offering users an unprecedented opportunity to optimize their earnings.

Started date: 04 Apr 2024Last updated: 19 Mar 2025Scope review: 29917

up to $5,000 Paid: 200

AirPuff Smart Contracts

AirPuff revolutionizes the distribution and value realization from emerging Liquid Restaking and Restaking protocols, offering users an unprecedented opportunity to optimize their earnings.

Started date: 04 Apr 2024Last updated: 12 Jun 2025Scope review: 25165

up to $25,000 Paid: 0

Triaged by Hackenproof

RISC Zero zkVM

The RISC Zero zkVM is a verifiable computer that works like a real embedded RISC-V micro-processor, enabling programmers to write ZK proofs like they write any other code.

Started date: 28 Mar 2024Last updated: 19 May 2025Scope review: 42833

up to $150,000 Paid: 54000

Triaged by Hackenproof

Cronos Web

This bug bounty program is focused on Web in Cronos which will directly lead to loss of user funds, or breach of sensitive data, or deletion of site data.

Started date: 28 Mar 2024Last updated: 19 May 2025Scope review: 36828

up to $2,500 Paid: 4758

Triaged by Hackenproof

Cronos Smart Contracts

This bug bounty program is focused on smart contracts and decentralised applications in Cronos blockchain with the emphasis on any vulnerabilities causing unintentional withdrawal/draining of funds/loss of user funds. The program covers key projects in the Cronos ecosystem, including VVS Finance, Tectonic, and other DeFi projects. Cronos is the EVM chain running in parallel to the Cronos POS Chain (https://cronos-pos.org). It aims to massively scale the DeFi and decentralised application (DApp) ecosystem, by providing developers with the ability to instantly port apps from Ethereum and EVM-compatible chains.

Started date: 28 Mar 2024Last updated: 12 Jun 2025Scope review: 29918

up to $250,000 Paid: 0

Triaged by Hackenproof

Cronos Blockchain Protocols

This bug bounty program is focused on Cronos (blockchain) with the emphasis on any vulnerabilities causing unintentional withdrawal/draining of funds/loss of user funds. Cronos is the Ethereum Virtual Machine (EVM) chain running in parallel to the Cronos POS Chain (https://cronos-pos.org). It aims to massively scale the DeFi and decentralised application (DApp) ecosystem, by providing developers with the ability to instantly port apps from Ethereum and EVM-compatible chains.

Started date: 28 Mar 2024Last updated: 25 Jun 2025Scope review: 26237

up to $100,000 Paid: 9500

Triaged by Hackenproof

Zest Protocol Smart Contracts

Zest Protocol is a Bitcoin lending protocol. Zest Protocol operates on-chain and is open-source. Zest Protocol exists to make Bitcoin productive. All of it. The protocol strives to create a vibrant borrowing and lending ecosystem around BTC the asset. For more information about Zest Protocol, please visit https://www.zestprotocol.com/. Zest Protocol provides rewards in USDC/T on Ethereum, denominated in USD. For more details about the payment process, please view the Rewards by Threat Level section further below.

Started date: 26 Mar 2024Last updated: 23 Apr 2025Scope review: 30635

up to $100,000 Paid: 0

Triaged by Hackenproof

MetaMask Validator Staking Smart Contracts

MetaMask is a self-custodial wallet used to manage your identity, digital assets and explore web3. This program covers Staking in [MetaMask Portfolio Validator Staking.](https://hackenproof.com/redirect?url=http://portfolio.metamask.io) Users stake 32 ETH and receive rewards in return. Deposits, claiming rewards, requesting withdrawals, provisionsing/deprovisioning of validator keys by the operator, and dispatching of rewards/fees are all executed by/via the [Kiln On-Chain (v1) smart contracts ](https://hackenproof.com/redirect?url=http://github.com/kilnfi/staking-contracts) deployed without a proxy.

Started date: 18 Mar 2024Last updated: 22 May 2025Scope review: 33383

up to $700,000 Paid: 0

Bug Bounty Programs 2025

Explore all HackenProof’s programs below or filter the tech stack you work best with: let the bug hunt begin!