Last updated Jul 21, 2026 · 20:58 UTC
Showing 181–200 of 301
301 audit contests
| Protocol | Source | Prize | Window | Link |
|---|---|---|---|---|
|
MagicSea - the native DEX on the IotaEVM
|
Sherlock
Finished
|
$28K |
Jul 01 - Jul 11, 2024
10 days
|
View |
|
Union Finance Update #2
|
Sherlock
Finished
|
$12K |
Jul 08 - Jul 13, 2024
5 days
|
View |
|
Aloe Update
|
Sherlock
Finished
|
$12K |
Jul 08 - Jul 16, 2024
8 days
|
View |
|
Super Boring
|
Sherlock
Finished
|
$18K |
Jul 11 - Jul 17, 2024
6 days
|
View |
|
Allora
|
Sherlock
Finished
|
$78K |
Jun 28 - Jul 19, 2024
21 days
|
View |
|
Velocimeter
|
Sherlock
Finished
|
$67K |
Jul 01 - Jul 25, 2024
24 days
|
View |
|
Exactly Protocol Update - Staking Contract
|
Sherlock
Finished
|
$8K |
Jul 22 - Jul 25, 2024
3 days
|
View |
|
Kwenta Staking Rewards Upgrade
|
Sherlock
Finished
|
$8K |
Jul 31 - Aug 03, 2024
3 days
|
View |
|
MakerDAO Endgame
|
Sherlock
Finished
|
$415K |
Jul 08 - Aug 05, 2024
28 days
|
View |
|
Winnables Raffles
|
Sherlock
Finished
|
$8K |
Aug 16 - Aug 20, 2024
4 days
|
View |
|
Sentiment V2
|
Sherlock
Finished
|
$29K |
Aug 14 - Aug 24, 2024
10 days
|
View |
|
Midas - Instant Minter/Redeemer
|
Sherlock
Finished
|
$22K |
Aug 19 - Aug 27, 2024
8 days
|
View |
|
Rumpel Point Tokenization Protocol
|
Sherlock
Finished
|
$10K |
Aug 26 - Aug 29, 2024
3 days
|
View |
|
Velar Artha PerpDEX
|
Sherlock
Finished
|
$35K |
Aug 30 - Sep 09, 2024
10 days
|
View |
|
ZeroLend One
|
Sherlock
Finished
|
$44K |
Aug 22 - Sep 10, 2024
19 days
|
View |
|
Cork Protocol
|
Sherlock
Finished
|
$15K |
Aug 29 - Sep 10, 2024
12 days
|
View |
|
Perennial V2 Update #3
|
Sherlock
Finished
|
$54K |
Aug 26 - Sep 13, 2024
18 days
|
View |
|
Flayer
|
Sherlock
Finished
|
$46K |
Sep 02 - Sep 15, 2024
13 days
|
View |
|
Boost Core Incentive Protocol
|
Sherlock
Finished
|
$34K |
Sep 11 - Sep 20, 2024
9 days
|
View |
|
Saffron Lido Vaults
|
Sherlock
Finished
|
$12K |
Sep 16 - Sep 21, 2024
5 days
|
View |
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock
Finished
Sherlock launched in 2022 with a unique twist: protocols that pass a Sherlock audit can buy on-chain coverage backed by Sherlock and its watson community. Contests typically run 7 to 30 days with $50,000-$300,000 prize pools. Watsons (Sherlock auditors) submit findings, the judging panel determines severity, and the prize is split across valid unique findings.
This page shows only contests aggregated from Sherlock. For audit contests on other platforms, see the full Web3 audit competition tracker.
Six major platforms host the Web3 audit competitions and smart contract bug bounty programs aggregated above. Click any platform to see only its active contests.
| Platform | Type | Typical Prize | Contest Length | Best For |
|---|---|---|---|---|
Code4rena
|
Audit contests | $50K to $500K | 3 to 14 days | DeFi protocols pre-launch |
|
Sherlock
|
Contests + bounties | $50K to $300K | 7 to 30 days | Insurance-backed audits |
CodeHawks
|
Audit contests + First Flights | $5K to $200K | 3 to 21 days | Newer auditors building a track record |
Cantina
|
Mega-comps + bounties | $200K to $2M+ | 14 to 30 days | Experienced researchers, high-value protocols |
Immunefi
|
Ongoing bug bounties | Up to $15M per critical | Ongoing | Production protocol vulnerability hunting |
HackenProof
|
Bounties + crowdsourced audits | $1K to $1M+ | Ongoing or time-boxed | Managed Web3 programs and exchange/protocol bounties |
Sherlock contests have stricter judging and include an insurance-backed bounty period afterward. Code4rena focuses purely on time-boxed contests. Sherlock prize pools are typically smaller ($50K-$300K) than Code4rena ($50K-$500K), but Sherlock watsons earn from post-contest bounties too.
Every currently-active Sherlock audit competition appears in the listing above, pulled from the Sherlock API every 2 hours. You can also browse all contests directly on audits.sherlock.xyz.
The leading Web3 bug bounty platforms are Immunefi (largest, $15M max payouts on DeFi protocols), Cantina (Spearbit's bounty program plus audit competitions), HackenProof (managed Web3 bounties and crowdsourced audits), Sherlock (audit contests with insurance-backed bounties), and Code4rena (best known for time-boxed audit competitions). Codehawks rounds out the field with Cyfrin-run contests focused on emerging protocols and beginner-friendly First Flights.
Cantina runs the largest audit competitions ($2M+ prize pools for protocols like EigenLayer and Uniswap v4). Immunefi pays the highest per-bug bounty (up to $15M for critical findings). Code4rena and Sherlock typically run $100K-$500K audit contests. Codehawks First Flights are smaller but accessible to newer auditors.
Audit competitions invite security researchers to review a protocol's smart contract code for a fixed prize pool over 1-4 weeks. Rewards are split based on unique valid findings, weighted by severity (critical, high, medium). Code4rena, Sherlock, Codehawks, and Cantina are the main platforms.
Top auditors earn $10,000-$500,000+ per competition. Cantina and Code4rena regularly run $500K-$2M prize pool contests. Bug bounties can pay up to $15M per critical finding on platforms like Immunefi.
Audit contests run for a fixed time window with a fixed prize pool shared among all valid findings. Bug bounties are ongoing programs where each valid submission earns a direct per-vulnerability reward (often $50K-$15M depending on severity). Bug bounties require finding a real vulnerability in production code.
Learn the most common vulnerability classes first: reentrancy, flash loan attacks, oracle manipulation, and access control. The SCH Smart Contract Hacking Course covers all the core attack patterns that audit competitions test, starting from zero experience.
A practical path from learning vulnerability classes to submitting your first contest finding.
Master reentrancy, access control, oracle manipulation, flash loan attacks, and arithmetic overflows. These five classes account for most contest findings.
Read every public report from past Code4rena and Sherlock contests. Try to spot findings yourself before reading the writeup. This is how every top auditor trained.
First Flights are small audit contests designed for newer auditors. Prize pools are under $20K, scope is small, and competition is lighter. They build real submission history.
Pick an active audit contest from the tracker above filtered by Solidity and a $50K-$200K prize range. Spend 20 to 40 hours on the contest, even if you only find one valid medium-severity issue.
Publish your findings, share writeups on Twitter and Mirror, and start accumulating valid submissions across multiple platforms. A documented track record is what opens bug bounty access and full-time auditor roles.