Web3 Bug Bounty
Get the full power of bug bounties with Hacken's native platform, HackenProof.
- 45 000+
- ethical hackers
- 25 000+
- submitted reports
- 200+
- active programs
- $15.7M
- paid in bounties
Receive reports on security flaws from ethical hackers before cybercriminals can exploit them.
Cost-effective security
You only have to pay for found bugs, and HackenProof ensures that all bugs are relevant.
Choose your scope
Bug bounty program follows your goals, and you select the scope, timeframe and rewards.
Crowdsourced protection
Bug Bounty gives access to thousands of external security experts.
Bounties cost less than exploits
- $5.9B
total value hacked in DeFi
- $4.0B
stolen from crypto projects in 2025
- $5B
averted by HackenProof in potential losses
What projects need Bug Bounty?
Crypto Exchanges & Finance
Startups and established projects in lending and borrowing, trading and prediction markets, token swaps, investments, crowdfunding, insurance, portfolios, and wallets.
Blockchain Ecosystems
Enterprises developing blockchain and protocol technology and use cases for them.
Gaming
Web3 projects creating virtual worlds for entertainment and earning.
Arts and Collectibles
Apps and platforms for digital ownership in art and fashion, digital collectibles, and music.
When to run Bug Bounty?
A pre-launch bug bounty secures your product, minimizing risk at launch.
Public launch bug bounty enhances security, utilizing global talent.
Post-incident bug bounties restore trust, transforming weaknesses into strengths.
Why choose HackenProof for Bug Bounty?
Expertise
10k+ found bugs, 70+ active programs, 20k+ experts. Avalanche, CoinGecko, IoTeX, Huobi, and Gate.io use HackenProof.
Pay-as-you-go
Only pay for vetted bugs and triage services. HackenProof handles all policy and payment transactions.
Top-Notch Triage
Receive only the most relevant reports as we check for duplicates and out-of-scope issues and identify their significance.
How does it work?
You submit the required documentation and get the estimation of the audit scope, timeline, and price.
3 - 10 days
Get a quote
Bounty Policy
Sign Contract
Add funds
On average, it takes from 5 to 10 business days to launch your program.
Clients say
"CoinGecko is excited about working with Hacken for our bug bounty program. We are well aware of the dangers that vulnerabilities may present to our users and this is one way where we take proactive steps together with Hacken to ensure and improve the safety, security, and integrity of our platform."
Booby Ong
Co-founder, CoinGecko
"Hacken's work to analyze our recent Proof of Reserves update is a great example of the power of community feedback."
Binance
Binance
"We highly recommend Hacken to anyone in need of Web3 security services and a reliable partner for their blockchain initiatives. Their team's professionalism and expertise in the security space have helped us to secure an ecosystem for our users."
Isha Tyagi
Technical Program Manager
"Hacken has provided mature security audits with a proactive approach, prompt communication and valuable security recommendations. We appreciate our partnership and would recommend collaboration with Hacken to anyone keen to strengthen their code's resilience."
Aurora
Aurora
"Internal stakeholders are impressed with the work Hacken has completed so far. An organized team, they've managed the project well, never letting the six-hour time difference get in the way of productivity. Customers can expect an experienced and professional partner."
Tony Wei
CTO, Gate.io
"Hacken founders inherited quality, professionalism, and integrity from Deloitte, their ex-employer."
Sunny Lu
CEO, Vechain
"Hacken's meticulous approach to the audit process ensured that our smart contracts were reviewed comprehensively. Their professionalism and dedication were evident throughout the audit."
EBSI
Ebsi
"Hacken has provided highly professional audits with outstanding quality. We are delighted to work with such a well-known and trusted security vendor."
Jason, Seong Ho Lee
DeFi Architect at Wemade
"As our security partner, Hacken's team of experts is a pleasure to work with. Their persistence in making recommendations and solving problems is impressive."
Qevan Guo
Co-founder of IoTeX
"Entrusting Hacken with a bug bounty program was the right call for us. They took care of all the routine processes and helped us make our products more secure."
Status
Crypto Wallet
"They've extended their background and clarification on the subject to ensure the project's success."
Ruben Guevara
DevOps Engineer Security Oriented, PAID Network
FAQ
What is the best way to start a bug bounty program?
Prepare: Reach out HackenProof, Choose a type of bug bounty, Define the Scope, Set Rewards, Establish Triage, Craft the Policy, and Build the Internal Process.
Launch: Start Small, Analyze, Exchange Feedback.
Refine: Scale, Improve.What are the validity requirements for Bug Bounty?
Not all bug bounty programs and platforms are the same. The industry only recognizes valid bug bounty programs. The requirements for validity are as follows:
1. The policy should be public
2. Bug bounty policy should allow intrusive testing. The whole infrastructure should be in scope
3. It should include structured in scope/out of scope and clear program rules with clear statistics on reports, rewards, and SLAs. HackenProof experts ensure that your bug bounty program is valid and recognized by users, partners, and investors.What is HackenProof?
HackenProof is Hacken's separate entity that was created in 2017 solely for bug bounties.
HackenProof Website: https://hackenproof.com/
HackenProof Services:
Platform: HackenProof has all the needed functionality for the convenient program management
Professional Triage Team: HackenProof team handled over 16K reports.
Community of Security researchers (Hackers): more than 35K registered hackers
P&R: For all clients, HackenProof prepares social media announcements, publications on the blog, and mailing campaigns to the registered users.
Payments: HackenProof handles all payments between clients and hackers. The bounty reward can be paid in stablecoins, fiat, or native tokens.
HackenProof clients: Gate.io, Aptos, NEAR, Sui, Dfinity, Polygon, MetaMask, 1inch, TON, CoinGecko, OKX, and 150 projects more.
Integrations: HackenProof Bug Bounties are integrated into CoinGecko and CER.live.
