Does Core have a bug bounty program?

Yes, Core runs a public bug bounty program on HackenProof, with rewards up to $10K. It currently lists 3 in-scope assets.

How much does Core pay for bug bounties?

Core's published reward range on HackenProof is up to $10K. Actual payouts depend on severity and scope.

programs/HackenProof/core

Core

hackenproofHackenProof·updated 7d ago

bountymanaged

Discord → RSS

max reward: $10K
scope: 3 in · 1 out
safe harbor: unknown
response: no reports

open program

72

hunt score

$$cashnew

formula →

payout

27/55

bounty

20/20

freshness

25/25

how we sort the index, not an estimate of what you’ll earn

Attack surface

3 in-scope

1other
1urls
1android

Scope

In scope

003

urls01

+Core Web Wallet· Critical

android01

+Core Android App· Critical

other01

+Core Browser Extension· Critical

Out of scope

001

−Legacy Web walleturl· None

Change history

1 event

2026-10-29
first indexed
7d ago · 3 in-scope assets

// only one snapshot on record, changes appear from the next ingest onward

Community reports

0 reports

No reports yet. Be the first to share your triage timing for Core.

// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.

Your notes

▸ raw source payload

{
  "assetTypes": [
    "Web",
    "apps",
    "blockchain"
  ],
  "stage1Hash": "27a665979fa209d4ca13916b7a3b3cb044e2cab184d3479e7ab089401171c2fd",
  "description": "",
  "projectTypes": []
}