{"license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/","attribution":"ChainChoice (https://chainchoice.io)","category":"bug_bounties","evidenceReadAt":"2026-11-03","generatedAt":"2026-11-12","criteria":[{"id":"feeDisclosure","label":"Fee disclosure & take rate","weight":30},{"id":"disputeRecourse","label":"Dispute recourse when payment is refused","weight":30},{"id":"payoutTransparency","label":"Advertised maximum vs actually paid","weight":25},{"id":"modelDepth","label":"Coverage model & blockchain depth","weight":15}],"providers":{"immunefi-bounty":{"feeDisclosure":{"s":7,"q":"the subscription removes the 10% platform fee on all payouts","u":"https://immunefi.com/bug-bounty-program/","d":"2026-11-03"},"disputeRecourse":{"s":5,"q":"Disputing a bug report in the dashboard once it has been paid or marked as closed, with the exception of requesting mediation","u":"https://immunefi.com/rules/","d":"2026-11-03"},"payoutTransparency":{"s":6,"q":"To date, Immunefi bug bounty programs have paid out $107.3 million in awards for confirmed critical vulnerabilities alone. The median payout for a critical is $20,000 . The mean sits at $114,355","u":"https://immunefi.com/blog/research/nearly-every-long-running-bug-bounty-program-on-immunefi-has-found-a-critical-bug/","d":"2026-11-03"},"modelDepth":{"s":9,"q":"Showing all 155 bounty programs","u":"https://immunefi.com/bug-bounty/","d":"2026-11-03"}},"cantina":{"feeDisclosure":{"s":4,"q":"Deposits will only be slashed in specific cases. | Over-inflated severity claim","u":"https://docs.cantina.security/researchers/participation/deposits.md","d":"2026-11-03"},"disputeRecourse":{"s":3,"q":"If a resolution cannot be reached, either party can escalate the finding to Cantina for mediation. | The client has the final say on the resolution.","u":"https://docs.cantina.security/researchers/participation/bug-bounty","d":"2026-11-03"},"payoutTransparency":{"s":4,"q":"Payouts available $58.9M Total paid out $56.8M","u":"https://cantina.xyz/opportunities/bounties","d":"2026-11-03"},"modelDepth":{"s":8,"q":"Uniswap Uniswap Labs $15,500,000 in USDC Bug Bounty Live Cantina-Triaged Deposit required Started on 26 Nov 2024","u":"https://cantina.xyz/opportunities/bounties","d":"2026-11-03"}},"sherlock-bounty":{"feeDisclosure":{"s":7,"q":"Qualifying customers are required to pay the Platform Fee. The Platform Fee is equal to ten percent (10%) of the Research Fee.","u":"https://docs.sherlock.xyz/bug-bounties/post-launch-bounty","d":"2026-11-03"},"disputeRecourse":{"s":7,"q":"Pay $1k to escalate the issue to the 2nd level of the court system: the Sherlock Protocol Claims Committee | This committee is enforced by a 4 of 7 multisig","u":"https://docs.sherlock.xyz/bug-bounties/post-launch-bounty/dispute-resolution","d":"2026-11-03"},"payoutTransparency":{"s":3,"q":"Largest Sherlock Bug Bounty Usual Labs Payout 16,000,000 USDC 16M USDC Most Recent Sherlock Bug Bounty Aero Payout 500,000 USDC","u":"https://audits.sherlock.xyz/bug-bounties","d":"2026-11-03"},"modelDepth":{"s":7,"q":"Qualifying customers who have undergone a Sherlock audit have the opportunity to participate in Sherlock's Post-Launch Bug Bounty Program.","u":"https://docs.sherlock.xyz/bug-bounties/post-launch-bounty","d":"2026-11-03"}},"codehawks":{"feeDisclosure":{"s":3,"q":"Low platform fees | Higher platform fees","u":"https://docs.codehawks.com/llms-full.txt","d":"2026-11-03"},"disputeRecourse":{"s":4,"q":"For 48 hours following judging, escalations will be accepted to contest judgments. | Lead Judges of a contest will be responsible for assessing appeals during the appeals phase.","u":"https://docs.codehawks.com/hawks-auditors/appeals.md","d":"2026-11-03"},"payoutTransparency":{"s":7,"q":"Leaderboard Rank Name Earnings ↓ XP High (Unique) Medium (Unique) Low 1 vinica_boy 22,648.81","u":"https://codehawks.cyfrin.io/c/2025-02-gamma/results?t=leaderboard","d":"2026-11-03"},"modelDepth":{"s":4,"q":"Public BattleChain Confidence Pools Cyfrin Foundry Solidity Layer 2 Public 7.25 ETH","u":"https://codehawks.cyfrin.io/contests","d":"2026-11-03"}},"hackenproof":{"feeDisclosure":{"s":5,"q":"a two percent (2%) commission shall be applied to any withdrawal of funds from a | Account balance, including withdrawals of rewards","u":"https://hackenproof.com/HackenProof_Terms_and_Conditions.pdf","d":"2026-11-03"},"disputeRecourse":{"s":2,"q":"If you disagree with the decision of the triage team, you can request a mediation. To do that, left your thoughts in the comment box on the platform and submit a request ticket.","u":"https://docs.hackenproof.com/llms-full.txt","d":"2026-11-03"},"payoutTransparency":{"s":5,"q":"$26M+ Paid out to ethical hackers 82,000+ Ethical hackers 85,000+ Submitted reports 400+ Programs","u":"https://hackenproof.com/bug-bounty-platform","d":"2026-11-03"},"modelDepth":{"s":5,"q":"The public Bug Bounty program **has unlimited time and budget and everyone** on the platform can participate.","u":"https://docs.hackenproof.com/llms-full.txt","d":"2026-11-03"}}}}