Web3 security bounties

The largest smart-contract and web3 bug bounty programs, ranked by maximum reward. Browse open-source bounties →

Curated directory — figures are indicative; open a program for the live, authoritative reward. Security programs are platform-hosted (Immunefi, HackerOne, Cantina) and submitted there, not claimed as GitHub issues.

• LayerZero
  up to $15,000,000
  Multi-chain · Smart Contract · Immunefi
• Wormhole
  up to $10,000,000
  Multi-chain · Smart Contract · Immunefi
• Sky (MakerDAO)
  up to $10,000,000
  Ethereum · Smart Contract · Immunefi
• Uniswap
  up to $2,250,000
  Ethereum · Smart Contract · Immunefi
• Optimism
  up to $2,000,000
  Ethereum L2 · Smart Contract, Web/App · Immunefi
• Arbitrum
  up to $2,000,000
  Ethereum L2 · Smart Contract · Immunefi
• Lido
  up to $2,000,000
  Ethereum · Smart Contract · Immunefi
• Polygon
  up to $1,000,000
  Polygon · Smart Contract, Web/App · Immunefi
• Aave
  up to $1,000,000
  Ethereum · Smart Contract · Immunefi
• Chainlink
  up to $1,000,000
  Multi-chain · Smart Contract · Immunefi
• Compound
  up to $1,000,000
  Ethereum · Smart Contract · Immunefi
• The Graph
  up to $1,000,000
  Multi-chain · Smart Contract · Immunefi