Bug Hunter
Decentralized bug bounty and vulnerability coordination platform for Web3 protocols and ethical researchers.
Bug Hunter is a decentralized security platform connecting dApp creators with ethical hackers. By posting a bounty program, projects can leverage the power of the community to identify and secure vulnerabilities before malicious actors do. Ethical hackers can submit verified reports and earn XPR rewards directly to their wallets.
Standard Payout Tiers (XPR) On-Chain Settlement
How it works
- For Projects: Post your dApp URL and scope (Listing costs 1,000 credits). Review submissions, collaborate directly with researchers, and distribute rewards on-chain.
- For Hackers: Browse published programs and submit vulnerability findings (Submissions cost 100 credits to prevent spam) and earn guaranteed payouts upon acceptance!
For Projects:
- Post your dApp URL, name, and testing scope.
- Set XPR rewards for valid submissions.
- Choose public or private submissions.
- Review reports, ask questions, and approve/reject them. Approved reports trigger instant XPR payouts.
For Hackers:
- Browse programs and submit vulnerabilities.
- Follow the in-scope rules and provide clear reproduction steps.
- Discuss triage questions directly with program owners in the report activity thread.
- Approved reports earn XPR directly to your wallet.
Rules & What to Avoid
- Avoid automated scanners causing heavy server load.
- No DoS/DDoS, spamming, phishing, or social engineering.
- Do not tamper with property or physical data centers.
- Don’t create accounts using the project’s or Alvosec’s name.
- Only test accounts or environments you’re explicitly permitted to.
- Give teams reasonable time to fix issues before public disclosure.
In-Scope Focus:
- Smart contracts: reentrancy, access control, logic flaws.
- Frontend/API: input validation, auth issues, exposed endpoints.
Published Bug Bounty Programs
Active Web3 protocol security programs open for verified testing, ethical bug hunting, and on-chain payouts.
Program Scope & Rules
In-Scope Focus Assets
Submissions Tracker
| Date | Reporter | Severity | Title | Status | Action |
|---|
Submit Vulnerability
Hackers Leaderboard & Rankings
Top recognized security researchers and white-hat hackers protecting decentralized ecosystems on XPR Network.
| Rank | Ethical Researcher | Accepted Reports | Badges & Honors |
|---|
Report Activity & Researcher Discussion
Direct communication channel to ask questions, request reproduction clarifications, or coordinate fixes.
Program Owner Decision & Bounty Payout
Bounty Calculation & Recommended Payout Tiers
XPR Web3 Security StandardSelect a severity tier preset or enter a custom amount based on the impact, exploitability, and clarity of the reproduction steps: