Does Avalanche Websites and APIs have a bug bounty program?

Yes, Avalanche Websites and APIs runs a public bug bounty program on HackenProof, with rewards up to $10K. It currently lists 10 in-scope assets.

How much does Avalanche Websites and APIs pay for bug bounties?

Avalanche Websites and APIs's published reward range on HackenProof is up to $10K. Actual payouts depend on severity and scope.

programs/HackenProof/avalanche-websites-and-apis

Avalanche Websites and APIs

hackenproofHackenProof·updated 7d ago

bountymanaged

Discord → RSS

max reward: $10K
scope: 10 in · 11 out
safe harbor: unknown
response: no reports

open program

72

hunt score

$$cashnew

formula →

payout

27/55

bounty

20/20

freshness

25/25

how we sort the index, not an estimate of what you’ll earn

Attack surface

10 in-scope

4wildcards
4urls
2apis

Scope

In scope

010

wildcards04

urls04

+support.avalabs.org· None
+Avalanche-Wallet· Critical
+AvalancheJS· Critical
+Avalanche-Wallet-SDK· Critical

apis02

+api.avax.network· Critical
+api.avax-test.network· Critical

Out of scope

011

wildcards02

−*.snowtrace.io· None
−*.avacloud.io· None

urls09

−chat.avax.network· None
−docs.avax.network· None
−chat.avalabs.org· None
−buy.avax.network· None
−community.avax.network· None
−test*.avax.network· None
−forum.avax.netowrk· None
−avalanche-hub.com· None
−academy.avax.network· None

Change history

1 event

2026-10-29
first indexed
7d ago · 10 in-scope assets

// only one snapshot on record, changes appear from the next ingest onward

Community reports

0 reports

No reports yet. Be the first to share your triage timing for Avalanche Websites and APIs.

// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.

Your notes

▸ raw source payload

{
  "assetTypes": [
    "Web",
    "blockchain",
    "smart contract"
  ],
  "stage1Hash": "c26ad40c75d3101c1f14be347eb653138bf5da15922b69f8b4825d2cea10071b",
  "description": "",
  "projectTypes": []
}