Last updated Jul 14, 2026 · 05:51 UTC
Showing 181–198 of 198
128 audit contests70 bug bounty programs
| Protocol | Source | Prize | Window | Link |
|---|---|---|---|---|
|
ammalgam-contracts
|
Cantina
Finished
|
$60K |
Jul 09 - Jul 29, 2025
20 days
|
View |
|
pike-tapio-monrepo
|
Cantina
Finished
|
$35K |
Jul 14 - Aug 04, 2025
21 days
|
View |
|
aave-aptos-ctf
|
Cantina
Finished
|
$100K |
Jun 27 - Aug 08, 2025
42 days
|
View |
|
Citrea
|
Cantina
Finished
|
$80K |
Jul 18 - Aug 15, 2025
28 days
|
View |
|
solayer-bridge
|
Cantina
Finished
|
$50K |
Aug 15 - Aug 31, 2025
16 days
|
View |
|
kuru-contracts
|
Cantina
Finished
|
$100K |
Aug 18 - Sep 01, 2025
14 days
|
View |
|
Clementine
|
Cantina
Finished
|
$80K |
Aug 11 - Sep 08, 2025
28 days
|
View |
|
mev-commit
|
Cantina
Finished
|
$12K |
Sep 15 - Sep 21, 2025
6 days
|
View |
|
octant-v2-core
|
Cantina
Finished
|
$60K |
Sep 08 - Sep 29, 2025
21 days
|
View |
|
makina-contracts
|
Cantina
Finished
|
$100K |
Sep 18 - Oct 15, 2025
27 days
|
View |
|
Avon-Contracts
|
Cantina
Finished
|
$36K |
Oct 06 - Oct 27, 2025
21 days
|
View |
|
Mento-V3
|
Cantina
Finished
|
$60K |
Nov 26 - Dec 17, 2025
22 days
|
View |
|
VII-Finance-Contracts
|
Cantina
Finished
|
$69K |
Jan 12 - Jan 26, 2026
14 days
|
View |
|
Royco Dawn
|
Cantina
Finished
|
$50K |
Jan 20 - Jan 27, 2026
7 days
|
View |
|
Revert Finance
|
Cantina
Finished
|
$50K |
Mar 18 - Mar 25, 2026
7 days
|
View |
|
Revert Finance - StableSwap Hooks
|
Cantina
Finished
|
$50K |
Apr 30 - May 07, 2026
7 days
|
View |
|
Reserve Governor
|
Cantina
Finished
|
$30K |
Apr 30 - May 10, 2026
10 days
|
View |
|
Morpho Midnight
|
Cantina
Escalation
|
$400K |
May 29 - Jun 12, 2026
14 days
|
View |
Cantina
Finished
Cantina
Finished
Cantina
Finished
Cantina
Finished
Cantina
Finished
Cantina
Finished
Cantina
Finished
Cantina
Finished
Cantina
Finished
Cantina
Finished
Cantina
Finished
Cantina
Finished
Cantina
Finished
Cantina
Finished
Cantina
Finished
Cantina
Finished
Cantina
Finished
Cantina
Escalation
Cantina is backed by Spearbit, one of the most respected smart contract security firms. Cantina runs two products: large public audit competitions (typically $200,000-$2,000,000+ prize pools) and an ongoing Web3 bug bounty marketplace. Cantina contests draw the most experienced researchers in the industry and run 14 to 30 days.
This page shows only competitions aggregated from Cantina. For audit contests on other platforms, see the full Web3 audit competition tracker.
Six major platforms host the Web3 audit competitions and smart contract bug bounty programs aggregated above. Click any platform to see only its active contests.
| Platform | Type | Typical Prize | Contest Length | Best For |
|---|---|---|---|---|
Code4rena
|
Audit contests | $50K to $500K | 3 to 14 days | DeFi protocols pre-launch |
Sherlock
|
Contests + bounties | $50K to $300K | 7 to 30 days | Insurance-backed audits |
CodeHawks
|
Audit contests + First Flights | $5K to $200K | 3 to 21 days | Newer auditors building a track record |
|
Cantina
|
Mega-comps + bounties | $200K to $2M+ | 14 to 30 days | Experienced researchers, high-value protocols |
Immunefi
|
Ongoing bug bounties | Up to $15M per critical | Ongoing | Production protocol vulnerability hunting |
HackenProof
|
Bounties + crowdsourced audits | $1K to $1M+ | Ongoing or time-boxed | Managed Web3 programs and exchange/protocol bounties |
Cantina hosts the largest audit competitions in Web3, including $2M+ prize pools for EigenLayer-contracts ($2.5M), Uniswap v4 ($2.4M), and PumpSwap ($2M). Typical Cantina contests range $200,000 to $2,000,000, much higher than Code4rena or Sherlock averages.
Cantina is the public competition arm of Spearbit, a leading Web3 security firm. Spearbit runs private invite-only audits; Cantina runs open competitions where any researcher can participate. Both share judging expertise and quality standards.
The leading Web3 bug bounty platforms are Immunefi (largest, $15M max payouts on DeFi protocols), Cantina (Spearbit's bounty program plus audit competitions), HackenProof (managed Web3 bounties and crowdsourced audits), Sherlock (audit contests with insurance-backed bounties), and Code4rena (best known for time-boxed audit competitions). Codehawks rounds out the field with Cyfrin-run contests focused on emerging protocols and beginner-friendly First Flights.
Cantina runs the largest audit competitions ($2M+ prize pools for protocols like EigenLayer and Uniswap v4). Immunefi pays the highest per-bug bounty (up to $15M for critical findings). Code4rena and Sherlock typically run $100K-$500K audit contests. Codehawks First Flights are smaller but accessible to newer auditors.
Audit competitions invite security researchers to review a protocol's smart contract code for a fixed prize pool over 1-4 weeks. Rewards are split based on unique valid findings, weighted by severity (critical, high, medium). Code4rena, Sherlock, Codehawks, and Cantina are the main platforms.
Top auditors earn $10,000-$500,000+ per competition. Cantina and Code4rena regularly run $500K-$2M prize pool contests. Bug bounties can pay up to $15M per critical finding on platforms like Immunefi.
Audit contests run for a fixed time window with a fixed prize pool shared among all valid findings. Bug bounties are ongoing programs where each valid submission earns a direct per-vulnerability reward (often $50K-$15M depending on severity). Bug bounties require finding a real vulnerability in production code.
Learn the most common vulnerability classes first: reentrancy, flash loan attacks, oracle manipulation, and access control. The SCH Smart Contract Hacking Course covers all the core attack patterns that audit competitions test, starting from zero experience.
A practical path from learning vulnerability classes to submitting your first contest finding.
Master reentrancy, access control, oracle manipulation, flash loan attacks, and arithmetic overflows. These five classes account for most contest findings.
Read every public report from past Code4rena and Sherlock contests. Try to spot findings yourself before reading the writeup. This is how every top auditor trained.
First Flights are small audit contests designed for newer auditors. Prize pools are under $20K, scope is small, and competition is lighter. They build real submission history.
Pick an active audit contest from the tracker above filtered by Solidity and a $50K-$200K prize range. Spend 20 to 40 hours on the contest, even if you only find one valid medium-severity issue.
Publish your findings, share writeups on Twitter and Mirror, and start accumulating valid submissions across multiple platforms. A documented track record is what opens bug bounty access and full-time auditor roles.