bounty

Aave announced that its bug bounty program has been updated to better align rewards with the risk status of each part of the ecosystem and to simplify the review process. The maximum reward for critical vulnerability fixes for Aave V4 and Core Aave V3 has now been increased fivefold.

Aave officially announced an update to its bug bounty program to better match the risk characteristics of various parts of the ecosystem and simplify the review process. According to the latest adjustments, the bounty cap for critical bugs in Aave V4 and Core Aave V3 has been increased to five times the original amount.Aave Labs also proposed a reorganization of the bounty framework, placing different subsystems under the management of platforms such as Immunefi, Sherlock, and Cantina. The core components such as Core Aave V3, V2, and GHO will continue to be managed by Immunefi; Aave V4 and Aave App Stack will transition to Sherlock; and Aave V3 on Aptos will be managed by Cantina.

The blockchain TAC team stated that it has confirmed a previous cross-chain layer security incident that resulted in approximately $2.8 million in assets being transferred, involving assets such as USDT, BLUM, and tsTON.TAC stated that if the attacker returns the relevant funds to the designated multi-signature address, the team will consider this incident as a "white hat rescue" and will not take legal action against the operators involved with ETH/BSC, ZEC, and TON addresses.As a reward, the attacker can receive approximately 10% of the bounty, equivalent to about 13 ETH and 300 ZEC.

According to official news, the smart contract auditing platform Code4rena has announced that it will gradually cease operations, and the Web3 security company Immunefi will take over its clients and security researchers. Code4rena posted on social media that it has made the decision to shut down and stated that all ongoing competitions and bounty activities will be completed as usual, and existing collaborations will be "properly concluded." Immunefi stated that it will assist in migrating Code4rena's bounty projects, reward structures, and researchers to its platform.Code4rena is known for its "competitive auditing" model, where independent researchers compete to find vulnerabilities in smart contracts for rewards. This shutdown comes less than two years after blockchain security company Zellic acquired Code4rena in 2024. Previously, Code4rena raised $6 million from Paradigm in 2023 for auditing incentives and platform expansion.This shutdown comes at a difficult time for DeFi protocols and the security sector. Data from DefiLlama shows that there were over 20 crypto vulnerability incidents in April alone, setting a monthly record. JPMorgan analysts believe that ongoing DeFi security incidents are limiting major institutional investors from entering the market. Meanwhile, the total value locked in DeFi has decreased from about $160 billion in October to approximately $83 billion currently.

After the Kelp security incident, Tether's asset interoperability protocol USDT0 announced details of its protocol security architecture, stating that the current system uses a proprietary DVN (Decentralized Verification Network) and has message veto power, while requiring 3 independent validators to reach a 3/3 consensus based on different codebases before cross-chain messages can be settled.The current validating nodes include USDT0's proprietary DVN, LayerZero, and Canary, with plans to expand to 4/4 and 5/5 verification mechanisms in the future. USDT0 also stated that all multi-signature transactions must undergo multiple reviews by internal teams, external security teams, and auditing institutions before submission for signing. Relevant contracts have been audited by organizations such as Guardian and OpenZeppelin and have launched a $6 million bug bounty program on Immunefi.

According to the official announcement, Gate DEX BountyDrop has launched the Catapult Trade airdrop event today. Users can enter the BountyDrop module to participate in tasks through the "Events" page of the Gate DEX App. Among all participants who complete the tasks, 238 participants will be randomly selected to share a $15,000 creator package.Gate Wallet is an industry-leading multi-chain crypto wallet that connects over 100 public chains, millions of assets, and tens of thousands of DApps in one place, providing a professional-level DEX experience and the best solutions for every DEX need. BountyDrop is a dedicated earning activity area in the discovery page of Gate DEX, where users have the chance to win rewards or participate in a lottery to obtain airdrop tokens by completing simple tasks.

OKX founder and CEO Star retweeted on-chain detective ZachXBT's tweet about market manipulation in RAVE, stating that OKX's risk engine is operating normally and has not been affected by the fluctuations in the RAVE market. Star announced that OKX will provide an additional $25,000 bounty to support ZachXBT's investigation into the RAVE incident.It is reported that ZachXBT previously accused RAVE of suspected market manipulation and called for Binance, Bitget, and Gate to jointly investigate, offering a $25,000 reward. As of the time of publication, the price of the RAVE token has fallen below $1, a decline of over 95% from its peak.

The prediction market platform Polymarket has launched a bug bounty program on the Cantina platform with a maximum reward of $5 million. The program covers the entire technology stack, including 18 smart contracts on Polygon (V1/V2 CTFExchange and NegRisk versions, fee modules, conditional token frameworks, pUSD collateral wrapping/unwrapping systems, UMA oracle adapter, etc.), web applications, and related infrastructure (key web vulnerabilities such as remote code execution, sensitive data leakage, subdomain takeover involving wallet interaction, and malicious transaction injection are all eligible for the highest reward level).The maximum reward for smart contract-related vulnerabilities is $5 million, while the maximum reward for web application-related vulnerabilities is $250,000. The program is now officially open for submissions.

The Web3 security platform Immunefi announced on the X platform that the DeFi protocol Alchemix has relaunched its bug bounty program based on its latest v3 contract, with a maximum reward of $300,000.This program aims to encourage security researchers to review the new version of the contract code and identify potential vulnerabilities in advance to enhance the overall security of the protocol. Immunefi stated that this is currently a critical window for auditing the relevant code and participating in the bounty program.

According to the official announcement, Gate DEX BountyDrop has launched the R2 airdrop event. Users can enter the BountyDrop module to participate in tasks through the "Events" page on Gate DEX. Among all participants who complete the tasks, 1,000 participants will be randomly selected to share 1,000,000 R2.In addition, Gate DEX officially launched the "Gas-Free Light Month" special program from March 28 at 18:00 to April 30 at 18:00 (UTC+8). It is reported that for new wallet users who create or import wallets within 7 days, Gate DEX offers 3 full-process gas-free benefits covering sending, authorization, and trading. Existing users can also regularly receive 3 advanced gas-free opportunities each month.Moreover, during the event period, there is a special enhancement of the "First Charge Payment" benefit. Users who recharge 5--100 USDT to the Gas Station for the first time will have the related on-chain fees fully covered by the platform, even if there are no native tokens in their wallets.Gate DEX is an industry-leading multi-chain crypto platform, providing a one-stop connection to over 100 public chains, millions of assets, and tens of thousands of DApps, offering a professional DEX experience and the best solutions for every DEX need. BountyDrop is a dedicated earning activity area in the discovery page of Gate DEX, where users can win rewards or participate in a lottery to obtain airdrop tokens by completing simple tasks.

According to the official announcement, Gate DEX BountyDrop has launched the PACT airdrop event. Users can enter the BountyDrop module to participate in tasks through the "Events" page on Gate DEX. Among all participants who complete the tasks, 1,000 participants will be randomly selected to share $15,000 PACT.In addition, Gate DEX will hold the "DEX Peak Warrior Redemption Battle" event from March 19, 18:00 to April 2, 18:00 (UTC+8). This event leverages Gate Swap's powerful multi-chain aggregation capabilities, covering all EVM-compatible networks. Users only need to register in the Gate DEX wallet and complete Swap transactions on EVM-compatible chains, regardless of the currency, to participate in tiered rankings based on cumulative trading volume, with a maximum reward of 500 USDT for individuals.Gate DEX is an industry-leading multi-chain crypto platform, providing a one-stop connection to over 100 public chains, millions of assets, and tens of thousands of DApps, offering a professional-grade DEX experience and the best solutions for every DEX need. BountyDrop is a dedicated earning activity section in the discovery page of Gate DEX, where users can win rewards or participate in a lottery to obtain airdrop tokens by completing simple tasks.

According to the official announcement, Gate DEX BountyDrop has launched the YieldBay airdrop event. Users can enter the BountyDrop module to participate in tasks through the "Events" page on Gate DEX. Among all participants who complete the tasks, 1,000 participants will be randomly selected to share $15,000 YBAY.In addition, Gate DEX officially launched the "Gas-Free Spring Month" special program from February 26, 18:00 to March 26, 18:00 (UTC+8). It is reported that for new wallet users who create or import wallets within 7 days, Gate DEX offers 3 full-process gas-free benefits covering sending, authorization, and trading. Existing users can also regularly receive 15 advanced gas-free opportunities each month. Furthermore, during the event period, there is a special enhancement for the "First Recharge Subsidy" benefit. Users who recharge 5–100 USDT to the gas station for the first time will have the related on-chain fees fully subsidized by the platform, even if there are no native tokens in their wallets.Gate DEX is an industry-leading multi-chain crypto platform, providing a one-stop connection to over 100 public chains, millions of assets, and thousands of DApps, offering a professional-grade DEX experience and the best solutions for every DEX need. BountyDrop is a dedicated earning activity section in the discovery page of Gate DEX, where users have the chance to win rewards or participate in a lottery to obtain airdrop tokens by completing simple tasks.

According to Ethereum Foundation security researcher Fredrik, the Ethereum Foundation's bug bounty program has increased the maximum reward amount from $250,000 to $1,000,000.

IoTeX announced a 10% white hat bounty (approximately $440,000) for the hacker who attacked its ioTube cross-chain bridge, provided that the hacker returns the approximately $4.4 million in stolen assets within 48 hours.IoTeX co-founder and CEO Raullen Chai stated that if the funds are returned, the team will not pursue legal action and will not disclose the identity to law enforcement agencies.

According to the official announcement, Gate DEX BountyDrop has launched the 2U2.ai airdrop event. Users can enter the BountyDrop module to participate in tasks through the "Events" page on Gate DEX. Among all participants who complete the tasks, 1,000 participants will be randomly selected to share 200,000 2U2.In addition, Gate DEX will officially launch the "Spring Continuous Trading Challenge" from February 12, 18:00 to February 26, 18:00 (UTC+8). This challenge covers four core tracks: Exchange, Spot, Contracts, and Meme, each with tiered milestone rewards. Users can activate the challenge and receive cash rewards after completing their first qualifying trade in the corresponding track. Notably, this event supports the stacking of rewards across the four tracks. The total prize pool for this event is as high as 50,000 USDT, aimed at inviting global users to deeply experience the one-stop on-chain trading on both the Gate DEX web and app platforms through multi-track incentives.Gate DEX is an industry-leading multi-chain crypto platform, connecting over 100 public chains, millions of assets, and thousands of DApps, providing a professional-grade DEX experience and the best solutions for every DEX need. BountyDrop is a dedicated earning activity section in the discovery page of Gate DEX, where users can win rewards or participate in a lottery to obtain airdrop tokens by completing simple tasks.

Psy Protocol announced that it has achieved 521,000 transactions per second (TPS) on a real-world proof-of-work network, setting a new record for decentralized system throughput. The testing was supported by Google Cloud, and all transactions are verifiable on-chain, with complete data and cryptographic proofs open-sourced for independent auditing.The team stated that this result was achieved without sacrificing decentralization, security, or privacy, and has established a $100,000 bounty for anyone who can prove the results invalid. Carter Feldman, founder of Psy Protocol, said, "This is not a development network demonstration or theoretical calculation; every result is verifiable."This test demonstrates the infrastructure capabilities for a future AI agent economy, making high-frequency micropayments, continuous clearing markets, and large-scale AI collaboration feasible. Psy Protocol breaks through traditional blockchain throughput bottlenecks through parallel state architecture, client-generated proofs, recursive zero-knowledge proofs, and horizontal scaling design.Complete verification data and methods have been open-sourced, and users can access here for verification.

According to the official announcement, Gate DEX BountyDrop has launched the Buinkers airdrop event. Users can enter the BountyDrop module through the "Events" page on Gate DEX to participate in tasks. Among all participants who complete the tasks, 200 participants will be randomly selected to share 400,000 points.In addition, the official Meme Go under Gate DEX has announced that the "Weekly Trading Check-in" incentive activity is now officially launched. The event focuses on the SOL chain Meme coin special session, where users can receive cash rewards after accumulating a trading volume of 200 USDT. Both the inviter and the new user who completes their first transaction can also receive cash incentives.Gate DEX is an industry-leading multi-chain crypto platform, providing a one-stop connection to over 100 public chains, millions of assets, and tens of thousands of DApps, offering a professional DEX experience and the best solutions for every DEX need. BountyDrop is a dedicated earning activity section in the discovery page of Gate DEX, where users have the chance to win rewards or participate in a lottery to obtain airdrop tokens by completing simple tasks.

The OKX Joint Security Platform Cantina officially launches the OKX On-Chain Contract Vulnerability Bounty Program, with a total prize pool of $1 million. This program focuses on on-chain smart contracts that have been deployed on the mainnet and are in a real production environment, currently offering security audit bounties for DEX routing and related contracts that actually handle user asset flows.OKX currently operates production-grade on-chain DEX routing infrastructure across multiple ecosystems, which is a critical execution path for user on-chain transactions. By introducing a continuous, structured, and public vulnerability audit bounty mechanism, OKX aims to further enhance the security and transparency of on-chain trading systems, setting a standard for the security maintenance of production-grade on-chain systems in the industry.

Web3 asset data platform RootData has launched the 3rd and 4th bounty events, which will take place from January 30 to February 8. This series of events mainly targets projects that have recently listed on mainstream exchanges, focusing on key financial data such as financing, team, and token unlocks:《Phase 3: Dig Deep into Binance Spot & Futures Projects Transparency Over the Past Year》: Focuses on Binance Spot & Futures projects, unveiling the information fog, with a prize pool of 5000 USDT.《Phase 4: Review the Transparency of Exchange Listings in 2026》: In the face of projects listed on mainstream exchanges such as HTX, Bitget, Gate, and Bybit, a prize pool of 5000 USDT is also set.It is reported that RootData has previously initiated 2 bounty events aimed at ensuring every investor's right to know and building a transparent foundation for the blockchain data ecosystem.

Web3 asset data platform RootData announced on Twitter that the second bounty event “Dig Deep into Binance Alpha Projects Transparency” has entered a 48-hour countdown, having received over 500 high-quality feedback submissions, mainly focusing on team background and token unlocking details. This data significantly improved the granularity of Binance Alpha project data on Rootdata.The event is scheduled from January 8 to January 18 at 16:00 (UTC+0), with a total prize pool of 5000 USDT and substantial points rewards. Click to view detailed rules | event collection.