Services
Bug BountyPay-for-results bounty programs for Web2 and Web3 teams
Penetration TestingVetted researchers test your app. Kick-off within 24 hours
Vulnerability TriageValidated, prioritized reports without the AI-generated noise
Vulnerability Disclosure (VDP)A safe, public channel for researchers to report flaws
CTF ChallengesCTF competitions for Web3 and digital product companies
Security Audits
Audit TypesCompare Curated, Crowdsourced, and DualDefense audits
Private AuditHand-picked, vetted researchers review your code privately
DualDefense AuditA crowdsourced layer on top of your third-party audit
Crowdsourced AuditVerified researchers test only your defined scope
Layer 1 ProtocolSecurity audits for blockchain protocols and consensus layers
Smart Contract AuditCrowdsourced security audits for your smart contract code
Penetration TestingWhite-box, grey-box, or black-box testing from vetted security researchers. Testing starts within 24 hours, with a fixed-price quote after scoping.
Industries
Fintech
Banks
Neobanks
Blockchain
Government
Healthcare
AI
Post-Quantum
Use cases
SUI Security Expansion ProgramSui Foundation program: audits and bounties for Sui projects
Ethereum Security ProgramProgram: Bug bounty for ERC-4337 account abstraction, up to $250K
Case Study: OKXHow one of the world's largest crypto exchanges, trusted by 50M users, built robust security framework through partnership with HackenProof.
Hackers
For AI AgentsDirectory of AI security agents for Web3. List yours
Start HackingSign up, pick a program, and submit your first report
LeaderboardSee the top-ranked security researchers on HackenProof
CommunityJoin 82,000+ researchers to trade tips and bounty news
DocsGuides on programs, scope, rules, and payouts
Join Our Discord CommunityConnect with 82,000+ security researchers, discuss programs, trade tips, and be the first to hear about new bounties.
Company
About usWho we are and the team behind HackenProof
ContactsTalk to our team about your security needs
Referral ProgramRefer companies to HackenProof and earn rewards
As Featured in ForbesHackenProof researchers uncovered unsecured database of 114 million records that impacted up to 60 million Americans — as covered by Forbes.
Resources
Audit PortfolioBrowse completed audits and published reports
BlogVulnerability breakdowns, guides, and bug bounty news
Case StudiesHow OKX, NEAR, and VeChain secured their products
IntegrationsSync validated reports to Jira, Slack, GitHub, and PagerDuty
DocsPlatform documentation for companies and researchers
BrandbookLogos, colors, and guidelines for using our brand
HackenProof BlogVulnerability breakdowns, case studies, guides for security researchers, and news from the bug bounty ecosystem — all in one place.

Triage Servicesnew Bounties Audits Login Contact us

Bug Bounty Programs 2026

Explore all HackenProof’s programs below or filter the tech stack you work best with: let the bug hunt begin!

400+Total bug bounty
$26 000 000+In bounties paid out
85 000+Total received reports

Hidden Gems

Triaged by HackenProof

Zest Protocol Smart Contracts

Up to: $100,000

Started date:: 26 Mar 2024
Last updated:: 02 Oct 2026
Submissions:: Private
Paid:: Private

Triaged by HackenProof

Superposition Finance Web

Up to: $20,000

Started date:: 03 May 2024
Last updated:: 02 Oct 2026
Submissions:: 57
Paid:: $100

Triaged by HackenProof

Unitus V2 Smart Contracts

Up to: $50,000

Started date:: 10 May 2024
Last updated:: 02 Oct 2026
Submissions:: 265
Paid:: $0

Triaged by HackenProof

NAVI Protocol

Up to: $300,000

Started date:: 16 Oct 2025
Last updated:: 02 Oct 2026
Submissions:: 438
Paid:: $0

Triaged by HackenProof

Flipster Web & Mobile

Up to: $3,000

Started date:: 22 May 2025
Last updated:: 02 Oct 2026
Submissions:: 110
Paid:: $1,750

Triaged by HackenProof

ADI Foundation Smart Contracts

Up to: $10,000

Started date:: 09 Dec 2025
Last updated:: 08 Oct 2026
Submissions:: 112
Paid:: $2,000

Triaged by HackenProof

Bitkub Capital Group Holdings

Up to: $200

Started date:: 28 Oct 2025
Last updated:: 02 Oct 2026
Submissions:: 126
Paid:: $2,450

Triaged by HackenProof

BitKan Web & Mobile

Up to: $500

Started date:: 10 Dec 2025
Last updated:: 02 Oct 2026
Submissions:: 116
Paid:: $852

Triaged by HackenProof

Citrea Web & Apps

Up to: $25,000

Started date:: 28 Jan 2026
Last updated:: 02 Oct 2026
Submissions:: 44
Paid:: $600

Triaged by HackenProof

Ember EVM Smart Contracts

Up to: $15,000

Started date:: 12 Mar 2026
Last updated:: 02 Oct 2026
Submissions:: 375
Paid:: $0

2 Results

Search:treehouse

Live

Treehouse Smart Contracts

Treehouse is a decentralized application that introduces Treehouse Assets (tAssets) and Decentralized Offered Rates (DOR), new primitives that enable fixed income products in digital assets.

Started date:: 10 Apr 2025
Last updated:: 24 Sep 2026
Submissions:: 487

Up to:: $50,000
Paid:: Private

Triaged by HackenProof

blockchain
smart contract
Solidity

Live

Treehouse Web

Treehouse is a decentralized application that introduces Treehouse Assets (tAssets) and Decentralized Offered Rates (DOR), new primitives that enable fixed income products in digital assets.

Started date:: 30 Sep 2024
Last updated:: 24 Jul 2026
Submissions:: 88

Up to:: $10,000
Paid:: Private

Triaged by HackenProof

Staking
Web