Last updated Jul 11, 2026 · 09:32 UTC
Showing 1–20 of 25
25 audit contests
| Protocol | Source | Prize | Window | Link |
|---|---|---|---|---|
|
Hybra Finance Mitigation Review
|
Code4Rena
Finished
|
$5K |
Nov 06 - Nov 10, 2025
4 days
|
View |
|
Hybra Finance: mitigation review, round 2
|
Code4Rena
Finished
|
$5K |
Nov 11 - Nov 12, 2025
1 day
|
View |
|
Megapot
|
Code4Rena
Finished
|
$30K |
Nov 03 - Nov 13, 2025
10 days
|
View |
|
Sequence: Transaction Rails
|
Code4Rena
Finished
|
$18K |
Nov 11 - Nov 17, 2025
6 days
|
View |
|
Merkl
|
Code4Rena
Finished
|
$18K |
Nov 25 - Dec 01, 2025
6 days
|
View |
|
Brix Money
|
Code4Rena
Finished
|
$23K |
Nov 26 - Dec 03, 2025
7 days
|
View |
|
SukukFi
|
Code4Rena
Finished
|
$40K |
Nov 26 - Dec 05, 2025
9 days
|
View |
|
Garden
|
Code4Rena
Finished
|
$37K |
Nov 24 - Dec 08, 2025
14 days
|
View |
|
Swafe
|
Code4Rena
Finished
|
$100K |
Nov 18 - Dec 09, 2025
21 days
|
View |
|
Ekubo
|
Code4Rena
Finished
|
$183K |
Nov 19 - Dec 10, 2025
21 days
|
View |
|
Panoptic: Next Core
|
Code4Rena
Finished
|
$56K |
Dec 19 - Jan 07, 2026
19 days
|
View |
|
Rujira
|
Code4Rena
Judging
|
$40K |
Dec 16 - Jan 16, 2026
31 days
|
View |
|
Olas
|
Code4Rena
Finished
|
$62K |
Jan 22 - Feb 09, 2026
18 days
|
View |
|
Panoptic: Next Core Mitigation Review
|
Code4Rena
Finished
|
$6K |
Feb 13 - Feb 18, 2026
5 days
|
View |
|
Panoptic: Next Core Mitigation Review: Round 2
|
Code4Rena
Finished
|
$6K |
Feb 23 - Feb 25, 2026
2 days
|
View |
|
Intuition
|
Code4Rena
Finished
|
$17K |
Mar 04 - Mar 09, 2026
5 days
|
View |
|
Jupiter Lend
|
Code4Rena
Finished
|
$107K |
Feb 12 - Mar 13, 2026
29 days
|
View |
|
Injective Peggy Bridge
|
Code4Rena
Finished
|
$105K |
Feb 25 - Mar 17, 2026
20 days
|
View |
|
Swafe Mitigation Review
|
Code4Rena
Finished
|
$12K |
Mar 20 - Mar 24, 2026
4 days
|
View |
|
Chainlink Payment Abstraction V2
|
Code4Rena
Finished
|
$65K |
Mar 18 - Mar 27, 2026
9 days
|
View |
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Judging
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Finished
Code4Rena
Finished
Code4rena (often abbreviated C4) launched in 2021 and remains the most recognized audit competition platform in Web3. Contests typically run 3 to 14 days with prize pools between $50,000 and $500,000. Wardens submit findings, judges weight them by severity, and the prize pool is split proportionally across valid unique findings.
This page shows only contests aggregated from Code4rena. For audit contests on other platforms, see the full Web3 audit competition tracker.
Six major platforms host the Web3 audit competitions and smart contract bug bounty programs aggregated above. Click any platform to see only its active contests.
| Platform | Type | Typical Prize | Contest Length | Best For |
|---|---|---|---|---|
|
Code4rena
|
Audit contests | $50K to $500K | 3 to 14 days | DeFi protocols pre-launch |
Sherlock
|
Contests + bounties | $50K to $300K | 7 to 30 days | Insurance-backed audits |
CodeHawks
|
Audit contests + First Flights | $5K to $200K | 3 to 21 days | Newer auditors building a track record |
Cantina
|
Mega-comps + bounties | $200K to $2M+ | 14 to 30 days | Experienced researchers, high-value protocols |
Immunefi
|
Ongoing bug bounties | Up to $15M per critical | Ongoing | Production protocol vulnerability hunting |
HackenProof
|
Bounties + crowdsourced audits | $1K to $1M+ | Ongoing or time-boxed | Managed Web3 programs and exchange/protocol bounties |
Every currently-active Code4rena audit competition appears in the listing above, pulled directly from the Code4rena API every 2 hours. You can also browse all contests on code4rena.com/audits.
Top Code4rena wardens have earned over $100,000 from a single contest by finding multiple critical-severity vulnerabilities. Most active wardens earn $1,000 to $20,000 per contest depending on their finding count and severity.
The leading Web3 bug bounty platforms are Immunefi (largest, $15M max payouts on DeFi protocols), Cantina (Spearbit's bounty program plus audit competitions), HackenProof (managed Web3 bounties and crowdsourced audits), Sherlock (audit contests with insurance-backed bounties), and Code4rena (best known for time-boxed audit competitions). Codehawks rounds out the field with Cyfrin-run contests focused on emerging protocols and beginner-friendly First Flights.
Cantina runs the largest audit competitions ($2M+ prize pools for protocols like EigenLayer and Uniswap v4). Immunefi pays the highest per-bug bounty (up to $15M for critical findings). Code4rena and Sherlock typically run $100K-$500K audit contests. Codehawks First Flights are smaller but accessible to newer auditors.
Audit competitions invite security researchers to review a protocol's smart contract code for a fixed prize pool over 1-4 weeks. Rewards are split based on unique valid findings, weighted by severity (critical, high, medium). Code4rena, Sherlock, Codehawks, and Cantina are the main platforms.
Top auditors earn $10,000-$500,000+ per competition. Cantina and Code4rena regularly run $500K-$2M prize pool contests. Bug bounties can pay up to $15M per critical finding on platforms like Immunefi.
Audit contests run for a fixed time window with a fixed prize pool shared among all valid findings. Bug bounties are ongoing programs where each valid submission earns a direct per-vulnerability reward (often $50K-$15M depending on severity). Bug bounties require finding a real vulnerability in production code.
Learn the most common vulnerability classes first: reentrancy, flash loan attacks, oracle manipulation, and access control. The SCH Smart Contract Hacking Course covers all the core attack patterns that audit competitions test, starting from zero experience.
A practical path from learning vulnerability classes to submitting your first contest finding.
Master reentrancy, access control, oracle manipulation, flash loan attacks, and arithmetic overflows. These five classes account for most contest findings.
Read every public report from past Code4rena and Sherlock contests. Try to spot findings yourself before reading the writeup. This is how every top auditor trained.
First Flights are small audit contests designed for newer auditors. Prize pools are under $20K, scope is small, and competition is lighter. They build real submission history.
Pick an active audit contest from the tracker above filtered by Solidity and a $50K-$200K prize range. Spend 20 to 40 hours on the contest, even if you only find one valid medium-severity issue.
Publish your findings, share writeups on Twitter and Mirror, and start accumulating valid submissions across multiple platforms. A documented track record is what opens bug bounty access and full-time auditor roles.