PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

7 Rules for Top-notch Web3 Bug Bounty Programs

bugcrowd.com | research | #bug-bounty | #web3 | #cryptocurrency | #bugcrowd | #crowdsourced-security | #responsible-disclosure | #blockchain | #reward-design | #program-design | #vulnerability-rewards
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd shares seven rules for strong Web3 bug bounty programs: impact-based rewards sized for expert researchers (Aurora paid $6M for one inflation bug) plus an open scope across the organization.
Published
Collected

Related coverage

research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
blog · bugcrowd.com
Blockport launches initiative to increase awareness around cyber-security within the crypto industry
Blockport's CTO Zowie Langdon announces a Bugcrowd-run responsible disclosure program that rewards researchers with points, aiming to lift security awareness across the crypto exchange industry.
research · bugcrowd.com
Ethical Security Research on SecureDrop
After a QR-code malware incident aimed at journalists, SecureDrop and Bugcrowd publish ethical research rules — no malware on live instances, no DoS — and add rewards up to $2,500 for valid findings.
research · bugcrowd.com
[Guest Blog] Calling All Bug Hunters: Sophos Teams Up with Bugcrowd
In a guest post, Sophos explains its Bugcrowd-powered responsible disclosure program, describing how formal triage improved response times and how rewards range from kudos to swag.
research · blog.quarkslab.com
Bitcoin Core audit
Quarkslab's first public security audit of Bitcoin Core, funded by Brink and coordinated by OSTIF, combining static and dynamic analysis to strengthen the ecosystem's security posture.
research · blog.trailofbits.com
Are blockchains decentralized?
A DARPA-commissioned Trail of Bits report examines unintended centralization in blockchains, questioning whether cryptocurrency's decentralization fundamentals hold up under reproducible analysis.
Back