HackenProof Live Bug Bounty Programs

5 Active contests
$103,200$103K Active prize pool
211 Bug bounties
1 Platforms

Last updated Jul 20, 2026 · 14:49 UTC

Highest prize GMGN Web & Mobile Hackenproof · $1.0M Ending soon Push Chain L1 DualDefense Audit Hackenproof · $70K · ends Aug 02 Best beginner entry Telcoin SC DualDefense Audit Hackenproof · $3K Largest bounty NEAR Protocol Hackenproof · $1.0M

Showing 81–100 of 291

80 audit contests211 bug bounty programs

Protocol Source Prize Window Link
Trustee Plus Mobile
walletapps
Hackenproof Active
$3K max Ongoing View
Treehouse Web
stakingweb
Hackenproof Active
$10K max Ongoing View
Treehouse Smart Contracts
Solidity l2blockchainsmart contract
Hackenproof Active
$250K max Ongoing View
SynFutures dApp
dappweb
Hackenproof Active
$10K max Ongoing View
Swap.io Smart Contracts
Rust dexsmart contract
Hackenproof Active
$100K max Ongoing View
Superposition Finance Web
lendingweb
Hackenproof Active
$20K max Ongoing View
Sui Protocol
Move Rust l1/l2smart contractblockchain
Hackenproof Active
$1.0M max Ongoing View
STON.fi DEX Smart Contracts v2
dexsmart contract
Hackenproof Active
$100K max Ongoing View
STBL Web
stablecoinweb
Hackenproof Active
$10K max Ongoing View
STBL Smart Contracts
Solidity stablecoinsmart contract
Hackenproof Active
$20K max Ongoing View
Status
dappwebsmart contract
Hackenproof Active
$5K max Ongoing View
NEAR Smart Contracts
Rust dappl1/l2smart contract
Hackenproof Active
$300K max Ongoing View
Parity Polkadot Release Infrastructure
Rust infrastructureother
Hackenproof Active
$25K max Ongoing View
OKX
cexnft marketplaceweb
Hackenproof Active
$1.0M max Ongoing View
NOYA.ai Smart Contracts
Solidity dappsmart contract
Hackenproof Active
$50K max Ongoing View
NonKyc.io
cexinfrastructureweb
Hackenproof Active
$5K max Ongoing View
NiceHash Mining platform
infrastructurewebapps
Hackenproof Active
$25K max Ongoing View
NEAR Web
dappweb
Hackenproof Active
$50K max Ongoing View
NEAR Foundation Web (Low)
dappweb
Hackenproof Active
$2K max Ongoing View
DOP Protocol
Solidity l1/l2blockchain
Hackenproof Active
$300K max Ongoing View
Loading timeline...
Hackenproof Active

Parity Polkadot Release Infrastructure

$25K Max bounty
Ongoing program
View on Hackenproof

About HackenProof

HackenProof is Hacken's Web3 bug bounty and crowdsourced audit platform. It combines ongoing vulnerability reward programs with time-boxed audit programs for smart contracts, exchanges, wallets, bridges, and L1/L2 ecosystems.

This page shows only Web3-relevant programs aggregated from HackenProof. For audit contests and bounties on other platforms, see the full Web3 audit competition tracker.

Smart Contract Audit Competition & Bug Bounty Platforms Compared

Six major platforms host the Web3 audit competitions and smart contract bug bounty programs aggregated above. Click any platform to see only its active contests.

Platform Type Typical Prize Contest Length Best For
Code4rena Audit contests $50K to $500K 3 to 14 days DeFi protocols pre-launch
Sherlock Contests + bounties $50K to $300K 7 to 30 days Insurance-backed audits
CodeHawks Audit contests + First Flights $5K to $200K 3 to 21 days Newer auditors building a track record
Cantina Mega-comps + bounties $200K to $2M+ 14 to 30 days Experienced researchers, high-value protocols
Immunefi Ongoing bug bounties Up to $15M per critical Ongoing Production protocol vulnerability hunting
HackenProof Bounties + crowdsourced audits $1K to $1M+ Ongoing or time-boxed Managed Web3 programs and exchange/protocol bounties
Access Control Reentrancy Oracle Manipulation Flash Loan Attacks Arithmetic Overflow Frontrunning Delegatecall Injection Governance DoS Weak Randomness Replay Unchecked Return Values

Frequently Asked Questions

What kind of programs does HackenProof run?

HackenProof runs public bug bounty programs, private bounty programs, and crowdsourced audits. In Web3, its listings include smart contracts, bridges, exchanges, wallets, and L1/L2 ecosystems.

How do I submit a report on HackenProof?

Open the protocol program page on hackenproof.com, review the scope, severity, reputation, and proof-of-concept requirements, then submit through the HackenProof dashboard.

What are the best smart contract bug bounty platforms?

The leading Web3 bug bounty platforms are Immunefi (largest, $15M max payouts on DeFi protocols), Cantina (Spearbit's bounty program plus audit competitions), HackenProof (managed Web3 bounties and crowdsourced audits), Sherlock (audit contests with insurance-backed bounties), and Code4rena (best known for time-boxed audit competitions). Codehawks rounds out the field with Cyfrin-run contests focused on emerging protocols and beginner-friendly First Flights.

Which audit competition platform pays the most?

Cantina runs the largest audit competitions ($2M+ prize pools for protocols like EigenLayer and Uniswap v4). Immunefi pays the highest per-bug bounty (up to $15M for critical findings). Code4rena and Sherlock typically run $100K-$500K audit contests. Codehawks First Flights are smaller but accessible to newer auditors.

How do smart contract audit competitions work?

Audit competitions invite security researchers to review a protocol's smart contract code for a fixed prize pool over 1-4 weeks. Rewards are split based on unique valid findings, weighted by severity (critical, high, medium). Code4rena, Sherlock, Codehawks, and Cantina are the main platforms.

How much can you earn in a smart contract audit competition?

Top auditors earn $10,000-$500,000+ per competition. Cantina and Code4rena regularly run $500K-$2M prize pool contests. Bug bounties can pay up to $15M per critical finding on platforms like Immunefi.

What is the difference between a bug bounty and an audit contest?

Audit contests run for a fixed time window with a fixed prize pool shared among all valid findings. Bug bounties are ongoing programs where each valid submission earns a direct per-vulnerability reward (often $50K-$15M depending on severity). Bug bounties require finding a real vulnerability in production code.

How do I get started with smart contract auditing?

Learn the most common vulnerability classes first: reentrancy, flash loan attacks, oracle manipulation, and access control. The SCH Smart Contract Hacking Course covers all the core attack patterns that audit competitions test, starting from zero experience.

How to Start Competing in Smart Contract Audits

A practical path from learning vulnerability classes to submitting your first contest finding.

  1. Learn the core vulnerability classes

    Master reentrancy, access control, oracle manipulation, flash loan attacks, and arithmetic overflows. These five classes account for most contest findings.

  2. Practice on retired contests

    Read every public report from past Code4rena and Sherlock contests. Try to spot findings yourself before reading the writeup. This is how every top auditor trained.

  3. Start with CodeHawks First Flights

    First Flights are small audit contests designed for newer auditors. Prize pools are under $20K, scope is small, and competition is lighter. They build real submission history.

  4. Enter your first full competition

    Pick an active audit contest from the tracker above filtered by Solidity and a $50K-$200K prize range. Spend 20 to 40 hours on the contest, even if you only find one valid medium-severity issue.

  5. Build a public track record

    Publish your findings, share writeups on Twitter and Mirror, and start accumulating valid submissions across multiple platforms. A documented track record is what opens bug bounty access and full-time auditor roles.

Auditor Readiness Quiz

Test whether you're ready to compete in your first audit contest.

Auditor Salary Calculator

Estimate full-time auditor compensation by experience and protocol type.

Audit Cost Estimator

Calculate what a smart contract audit will cost based on scope and complexity.

Smart Contract Auditing Course

Learn the vulnerability classes these competitions test, from zero to first finding.