Mathematics Undergraduate Research Awards (MURA) — Winter 2027
University of Waterloo
16-week full-time undergraduate mathematics/computer science research; on-campus or remote
Verified opportunity catalog
Browse source-backed grants, funding programs and bounties across AI, research and Web3.
| Reward | |||||||
|---|---|---|---|---|---|---|---|
| Mathematics Undergraduate Research Awards (MURA) — Winter 2027 | University of Waterloo | Grant / Funding | open | 2026-09-10 | University of Waterloo; on-campus or remote | yes | $11,000/term minimum (MURA $6,000 plus supervisor contribution $5,000 minimum) |
| Citadel Conference Travel Grant — NeurIPS 2026 | Citadel | Grant / Funding | open | 2026-10-05 | NeurIPS, Sydney, Australia | no | In-kind pass, travel, lodging, transport, and meals; no fixed cash award stated |
| University of Minnesota Undergraduate Research Opportunities Program — Spring 2027 | University of Minnesota Office of Undergraduate Research | Grant / Funding | open | 2026-10-05 | University of Minnesota; project-dependent | limited | $1,800 student research stipend |
| Folks Finance Bug Bounties | Folks Finance | Bounty | open | 2026-12-31 | Online vulnerability reporting | yes | Per-vulnerability bounty: critical $50,000 minimum up to $200,000; high $10,000… |
| Bucket Protocol Smart Contracts | Bucket Protocol / HackenProof | Bounty | open | Not listed | Online | yes | Critical $100,000-$500,000; High $5,000-$50,000; Medium $100-$2,000; Low $10-$50 |
| Kamino Bug Bounties | Kamino / Immunefi | Bounty | open | Not listed | Online | yes | Per-report bounty: smart-contract critical up to $1,500,000; high up to $100,00… |
| Pendle Boros Bug Bounty | Pendle Finance / Cantina | Bounty | open | Not listed | Online | yes | Critical $50,000-$500,000; High $20,000-$100,000 per qualifying report |
| Astros Smart Contracts | NAVI Protocol | Bounty | open | Not listed | Online / HackenProof | yes | $150-$150,000 per valid report; critical $15,000-$150,000; high $2,500-$15,000… |
| Bluefin Dex Contracts | Bluefin | Bounty | open | Not listed | Online / HackenProof | limited | $5,000-$15,000 per valid report; critical $10,000-$15,000; high $5,000; medium… |
| idOS Apps and SC | idOS Network | Bounty | open | Not listed | Online / HackenProof | yes | $250-$5,000 per valid report; critical $5,000; high $2,500; medium $1,000; low… |
| Momentum Smart Contracts | Momentum | Bounty | open | Not listed | Online / HackenProof | limited | $50-$200,000 per valid report; critical $20,000-$200,000; high $2,000-$20,000… |
| Scallop Protocol (Smart Contract) | Scallop | Bounty | open | Not listed | Online / HackenProof | yes | $30-$300,000 per valid report; critical $30,000-$300,000; high $3,000-$30,000… |
| BlockPI Network Bug Bounties | BlockPI Network | Bounty | open | Not listed | Online / Immunefi submission | yes | Critical $2,500-$5,000; high $1,500; medium $1,200; low $1,000 |
| Cronos Smart Contracts | Cronos | Bounty | open | Not listed | Online / HackenProof submission | yes | Critical $20,000-$200,000; high $500-$20,000; medium/low $0 |
| Unitus V2 Smart Contracts | Unitus | Bounty | open | Not listed | Online / HackenProof submission | yes | Critical $50,000; high $5,000; medium $2,000; low $1,000 |
| 1inch Aqua | 1inch | Bounty | open | Not listed | Online / HackenProof submission | yes | $100-$100,000 per valid report or improvement proposal; critical $20,000-$100,0… |
| ADI Foundation zkVM Verification | ADI Foundation | Bounty | open | Not listed | Online / HackenProof submission | yes | $200-$10,000 per valid vulnerability; critical $10,000; high $5,000; medium $2… |
| Ample Smart Contracts | Ample | Bounty | open | Not listed | Online / HackenProof submission | yes | Critical $0-$20,000; high $0-$5,000; medium $0-$1,000; low $0-$500 per valid re… |
| Dexalot Smart Contracts | Dexalot / HackenProof | Bounty | open | Not listed | Online / HackenProof | yes | Critical $10,000-$20,000; high $4,000-$6,000; medium $1,000-$2,000; low $200 |
| DeXe Protocol Smart Contracts | DeXe Protocol | Bounty | open | Not listed | Online / HackenProof submission | yes | Critical $10,000-$500,000; high $5,000-$10,000; medium $1,000; low $0 |
| Ember EVM Smart Contracts | Ember Protocol / HackenProof | Bounty | open | Not listed | Online / HackenProof | yes | Critical $10,000-$15,000; high $5,000; medium $0; low $0 |
| FlowX CLMM Smart Contracts | FlowX Finance / HackenProof | Bounty | open | Not listed | Online / HackenProof | yes | Critical $5,000; high $2,000; medium $700; low $200 |
| Haedal Smart Contracts | Haedal | Bounty | open | Not listed | Online / HackenProof submission | limited | Critical $20,000-$200,000; high $1,000-$20,000; medium $50-$1,000; low $5-$50 |
| Layer3 Smart Contracts | Layer3 | Bounty | open | Not listed | Online / HackenProof submission | yes | Critical $0-$500,000; high $0-$50,000; medium $0-$5,000; low $0 |
| Multipli Smart Contracts | Multipli | Bounty | open | Not listed | Online / HackenProof submission | yes | $0-$10,000 per valid vulnerability; critical $5,000-$10,000; high $2,000-$5,000… |
| NAVI Protocol Bug Bounty | NAVI Protocol | Bounty | open | Not listed | Online | yes | Up to $300,000 for critical smart-contract vulnerabilities; up to $10,000 for w… |
| NEAR Intents: Bridges | NEAR | Bounty | open | Not listed | Online / HackenProof submission | yes | $100-$300,000 per valid report; critical $10,000-$300,000; high $5,000-$10,000… |
| Raydium Bug Bounty | Raydium | Bounty | open | Not listed | Online | yes | Critical: 10% of directly affected funds capped at $505,000 with $50,000 minimu… |
| Turbos Finance Smart Contracts | Turbos Finance / HackenProof | Bounty | open | Not listed | Online / HackenProof | yes | Critical $5,000-$15,000; high $1,000-$3,000; medium $50-$500; low $0 |
| 0x Bug Bounties | 0x | Bounty | open | Not listed | Online | yes | Severity-based bounty: smart-contract critical $100,000-$1,000,000; high $35,00… |
| Arcadia Finance Smart Contracts Bug Bounties | Arcadia Finance / HackenProof | Bounty | open | Not listed | Online / HackenProof submission | limited | Critical $0-$25,000; high $0-$7,500; medium $0-$2,000; low $0 |
| Cetus Web Bug Bounties | Cetus / HackenProof | Bounty | open | Not listed | Online / HackenProof submission | limited | Critical $5,000-$10,000; high $1,000-$5,000; medium $100-$1,000; low $10-$100 |
| Citrea Protocol & Smart Contracts Bug Bounties | Citrea / HackenProof | Bounty | open | Not listed | Online / HackenProof submission | limited | Critical $25,000-$250,000; high $10,000-$25,000; medium $1,000-$3,000; low $100… |
| Ethena Bug Bounties | Ethena | Bounty | open | Not listed | Online | yes | Smart-contract critical $100,000-$3,000,000; high $10,000-$75,000; medium $10,0… |
| Exactly Bug Bounties | Exactly | Bounty | open | Not listed | Online | yes | Severity-based bounty: smart-contract critical $10,000-$25,000; high $5,000-$10… |
| Hedera Bug Bounties | Hedera | Bounty | open | Not listed | Online | yes | Blockchain critical $10,000-$30,000; high $3,000-$10,000; medium $3,000 |
| Solv Smart Contracts Bug Bounties | Solv Protocol / HackenProof | Bounty | open | Not listed | Online / HackenProof submission | limited | Critical $30,000-$50,000; high $5,000-$15,000; medium $1,000-$3,000; low $200-$… |
| SSV Network Bug Bounties | SSV Network | Bounty | open | Not listed | Online | yes | Critical $50,000-$250,000; high $30,000; medium $10,000; low $1,500 |
| Stargate Bug Bounties | Stargate Foundation / StargateDAO | Bounty | open | Not listed | Online | yes | Severity-based bounty: critical $100,000-$10,000,000; high $10,000-$100,000; me… |
| Starknet Blockchain/DLT Bug Bounties | Starknet / HackenProof | Bounty | open | Not listed | Online / HackenProof submission | limited | Critical $15,000-$250,000; high $1,250-$10,000; medium $0; low $0 |
| TermMax Bug Bounties | Term Structure Labs / TermMax | Bounty | open | Not listed | Online | yes | Severity-based bounty: smart-contract critical $10,000-$50,000; high $3,000-$25… |
| The Graph Bug Bounties | The Graph Foundation | Bounty | open | Not listed | Online | yes | Severity-based bounty: smart-contract critical $15,000-$50,000; high $5,000-$15… |
| Treehouse Smart Contracts Bug Bounties | Treehouse Finance / HackenProof | Bounty | open | Not listed | Online | yes | $1,000-$250,000; critical $100,000-$250,000; high $25,000-$50,000; medium $5,00… |
| Zynk Protocol Bug Bounties | Zynk / HackenProof | Bounty | open | Not listed | Online | yes | $0-$5,000; critical up to $5,000 |
| Beanstalk Bug Bounties | Beanstalk | Bounty | open | Not listed | Online | yes | Smart-contract critical $100,000-$1,100,000; severity-based rewards for high me… |
| Decentraland Bug Bounties | Decentraland | Bounty | open | Not listed | Online | yes | Maximum bounty $500,000; severity-based rewards per official table |
| Derive Bug Bounties | Derive / Lyra V2 / Immunefi | Bounty | open | Not listed | Not listed | yes | Critical up to $50,000; high $5,000; medium $2,000; low $500 |
| ENS Bug Bounties | ENS | Bounty | open | Not listed | Online | yes | Smart-contract critical $10,000-$250,000; high $25,000-$100,000; medium $10,000… |
| Horizen Bug Bounties | Horizen | Bounty | open | Not listed | Online | yes | Critical $5,000-$10,000; high $3,000; website/app critical $3,000; website/app… |
| Monad Consensus & Execution Bug Bounty | Monad Foundation / Cantina | Bounty | open | Not listed | Not listed | yes | Critical up to $1,000,000; high $150,000; medium $35,000 |
| Morpho Bug Bounty | Morpho / Cantina | Bounty | open | Not listed | Online / Cantina submission | yes | Critical up to $2,500,000; high up to $50,000; medium up to $10,000; low up to… |
| PancakeSwap Infinity Bug Bounty | PancakeSwap / Cantina | Bounty | open | Not listed | Not listed | yes | Critical up to $1,000,000; high $20,000; medium $2,000 |
| Symbiotic Bug Bounty | Symbiotic / Cantina | Bounty | open | Not listed | Not listed | yes | Critical up to $500,000; high $100,000; medium $10,000 |
| 42project Bug Bounty Program | 42project | Bounty | open | Not listed | Online / 42project | yes | Critical up to $25,000; high up to $8,000; medium up to $2,500; low up to $500 |
| ADI Predictstreet Smart Contracts | ADI Foundation / HackenProof | Bounty | open | Not listed | Online / HackenProof submission | yes | Critical $10,000; high $5,000; medium and low $0 per vulnerability |
| Centrifuge Protocol Bounty | Centrifuge / Cantina | Bounty | open | Not listed | Online / Cantina submission | yes | Critical $250,000; high $50,000; medium $5,000 |
| Cetus Smart Contracts Bug Bounty | Cetus / HackenProof | Bounty | open | Not listed | Online / HackenProof submission | yes | Critical $30,000-$300,000; high $3,000-$30,000; medium $100-$1,000; low $10-$100 |
| Chainlink Bug Bounty | Chainlink Labs | Bounty | open | Not listed | Online | yes | Variable severity-based bounty: smart-contract critical $100,000-$3,000,000; hi… |
| Hyperbridge Protocol | Hyperbridge / HackenProof | Bounty | open | Not listed | Online / HackenProof submission | yes | Critical $30,000-$50,000; high $5,000-$15,000; medium $2,000-$5,000; low $200-$… |
| Kiln OmniVault Bounty | Kiln / Cantina | Bounty | open | Not listed | Online / Cantina submission | yes | Critical $500,000; high $50,000; medium $20,000; hard cap $1,000,000 |
| Kuru Bug Bounty | Kuru Labs | Bounty | open | Not listed | Online | yes | Variable severity-based bounty: critical up to $50,000; high up to $25,000; med… |
| Midas Bug Bounty | Midas.app / Cantina | Bounty | open | Not listed | Online / Cantina submission | yes | Critical $500,000; high $25,000; medium $5,000; low $1,000; total rewards hard… |
| RedStone Bug Bounty | RedStone | Bounty | open | Not listed | Online | yes | Variable severity-based bounty: critical up to $250,000; high up to $50,000; me… |
| RootstockLabs Bug Bounties | RootstockLabs | Bounty | open | Not listed | Online | yes | Variable severity-based bounty: blockchain/DLT critical $10,000-$200,000; smart… |
| Starknet Staking | Starknet / HackenProof | Bounty | open | Not listed | Online / HackenProof submission | yes | Critical $15,000-$100,000; high $1,500-$10,000; medium $1,000; low $0 per vulne… |
| Starknet Web & SC | Starknet / HackenProof | Bounty | open | Not listed | Online / HackenProof submission | yes | Critical smart contract $15,000-$250,000; web critical $5,000-$10,000; high $1… |
| OKX Labs Onchain Bug Bounty | OKX Labs | Bounty | open | Not listed | Global / online | yes | Up to USD 1,000,000 individual bounty |
| Ondo Perps Bug Bounty | Ondo Global (Panama) Inc. | Bounty | open | Not listed | Online | yes | Critical up to $1,500,000; high up to $100,000; medium up to $20,000; low up to… |
| Polygon Bug Bounties | Polygon | Bounty | open | Not listed | Online | yes | Critical $20,000-$250,000; high $10,000; medium $2,000; payout denominated in U… |
| Reserve Protocol Bug Bounty | Reserve Protocol | Bounty | open | Not listed | Online | yes | Critical up to $10,000,000; high up to $100,000; medium up to $5,000; low up to… |
| Uniswap Bug Bounty | Uniswap Labs | Bounty | open | Not listed | Online | yes | Critical up to $15,500,000; high up to $1,000,000; medium up to $100,000 |
| 1inch - Web Bug Bounties | 1inch | Bounty | open | Not listed | Online global submission | yes | Up to $50,000 bounty; critical $15,000-$50,000; high $5,000; medium $1,000; low… |
| Compound Finance Bug Bounties | Compound DAO | Bounty | open | Not listed | Online vulnerability reporting | yes | Per-vulnerability bounty: critical $50,000-$1,000,000; high $10,000-$50,000; me… |
| Gearbox Bug Bounties | Gearbox / Immunefi | Bounty | open | Not listed | Online | yes | Critical 10% of directly affected funds up to $150,000 with $6,000 minimum; hig… |
| sBTC Bug Bounties | Stacks Endowment (Stacks) | Bounty | open | Not listed | Online global submission | yes | Up to $250,000 bounty; critical $25,000-$250,000; high $5,000-$25,000; medium $… |
| Velodrome Finance Bug Bounties | Velodrome Finance / Optimism Foundation / Immunefi | Bounty | open | Not listed | Online | yes | Smart-contract critical flat $100,000 bounty; high $40,000; medium $5,000; low… |
| Balancer Foundation Bug Bounties | Balancer Foundation | Bounty | open | Not listed | Online | yes | Critical $100,000-$1,000,000; High $25,000-$75,000; Medium up to $15,000 |
| G-Research Monthly Grant for Early Career Researchers | G-Research | Grant / Funding | open | Not listed | Online application; research location not specified | limited | Up to £2,000 per grant |
| GMTrade Bug Bounties | GMTrade | Bounty | open | Not listed | Online | yes | Critical $25,000-$100,000; High $10,000-$20,000; Medium $2,500-$7,500; 10% trea… |
| Intuition Bug Bounties | Intuition | Bounty | open | Not listed | Online | yes | Critical $5,000-$100,000; High $2,500-$5,000; Medium $1,000-$2,500; Low $1,000 |
| Lista DAO Bug Bounties | Lista DAO | Bounty | open | Not listed | Online | yes | Critical $100,000-$1,000,000; high $5,000-$10,000; medium $1,000-$5,000 |
| Lombard Finance Bug Bounties | Lombard Finance | Bounty | open | Not listed | Online | yes | Critical smart contract $50,000-$250,000; high $10,000-$50,000; medium $2,500… |
| Origin Protocol Bug Bounties | Origin Protocol | Bounty | open | Not listed | Online | yes | Critical smart contract up to $1,000,000; critical web/app $25,000; high $15,000 |
| Spark Bug Bounties | Spark | Bounty | open | Not listed | Online | yes | Smart-contract critical $50,000-$5,000,000; High $10,000-$100,000; web/app crit… |
| Zest Protocol V2 Bug Bounties | Zest Protocol | Bounty | open | Not listed | Online | yes | Critical up to $100,000 with $20,000 minimum; high $1,000-$20,000 |
| ZKsync Era Bug Bounties | ZKsync | Bounty | open | Not listed | Online | yes | Blockchain critical $50,000; smart-contract critical $100,000-$300,000; High $2… |
| BNB Chain Bug Bounty Program | BNB Chain / BNB Foundation | Bounty | open | Not listed | Worldwide subject to sanctions and local law | yes | P* case by case; P1 $20000-$100000; P2 $5000-$20000; P3 $1000-$5000; P4 $300-$1… |
| Ethereum Foundation Bug Bounty Program | Ethereum Foundation | Bounty | open | Not listed | Worldwide subject to sanctions and local law | yes | Up to $1000000 USD for qualifying bugs |
| Parallel Bug Bounties | Parallel | Bounty | open | Not listed | Remote | yes | Per-vulnerability: smart-contract critical $50000-$250000; high $10000-$50000… |
| Polymarket Bug Bounty | Polymarket | Bounty | open | Not listed | Worldwide subject to sanctions and platform restrictions | yes | Critical up to $5000000; high up to $500000; medium up to $50000; low up to $50… |
| 0x Protocol V4 Bug Bounty | 0x Labs | Bounty | open | Not listed | Remote | yes | Per-vulnerability bounty: critical up to $1,000,000; high up to $350,000; mediu… |
| AAVE Bug Bounties | Aave | Bounty | open | Not listed | Online / no fixed location | yes | Critical 10% of directly affected funds, max $1,000,000 min $50,000; high max $… |
| GMX Bug Bounties | GMX | Bounty | open | Not listed | Online / no fixed location | yes | Smart-contract critical up to $5,000,000; high $25,000; medium $10,000; web/app… |
| MUX Bug Bounties | MUX Protocol | Bounty | open | Not listed | Online / no fixed location | yes | Critical $20,000-$100,000; High $5,000-$20,000; Medium $2,000-$5,000; web/app C… |
| OpenZeppelin Bug Bounties | OpenZeppelin | Bounty | open | Not listed | Remote | yes | Per-vulnerability bounty: critical $5,000-$25,000; high $2,500-$5,000; medium $… |
| Optimism Bug Bounties | Optimism | Bounty | open | Not listed | Online / no fixed location | yes | Smart-contract/blockchain critical up to $2,000,042; high $15,000-$50,000; medi… |
| Sei Bug Bounties | Sei Foundation | Bounty | open | Not listed | Remote | yes | Per-vulnerability bounty: critical $50,000-$500,000; high $25,000; medium $5,00… |
| Threshold Network Bug Bounties | Threshold Network | Bounty | open | Not listed | Remote | yes | Per-vulnerability bounty: critical $10,000-$150,000; high $10,000; medium $2,00… |
| Wormhole Bug Bounties | Wormhole | Bounty | open | Not listed | Online / no fixed location | yes | Critical: up to $1,000,000; Tier 1 extract all chains TVL up to $1,000,000; Tie… |
| Cosmos Bug Bounties | Cosmos Labs | Bounty | open | Not listed | Online / no fixed location | yes | $50,000/$12,500/$2,500/$1,000 by severity |
| Sky Bug Bounties | Sky, formerly MakerDAO | Bounty | open | Not listed | Online / no fixed location | yes | Severity-based personal bounty up to $10,000,000; website/app critical up to $1… |
| Synthetix Bug Bounties | Synthetix | Bounty | open | Not listed | Online / no fixed location | yes | $100,000/$50,000/$30,000/$10,000/$1,000 by severity |
| Veda Bug Bounties | Veda | Bounty | open | Not listed | Online / no fixed location | yes | Critical $100,000-$1,000,000 variable; High $10,000-$25,000 |
| Base Bug Bounty Program | Base / Coinbase | Bounty | open | Not listed | Remote | yes | Program pools; per-report reward follows HackerOne or Cantina terms |
| Coinbase Onchain Bug Bounty | Coinbase | Bounty | open | Not listed | Remote | yes | Program pool up to $5M USDC; per-report reward follows Cantina terms |
| Dune Bug Bounty | Dune | Bounty | open | Not listed | Remote | yes | Per-vulnerability bounty; informational reports receive no bounty |
| dYdX Bug Bounty | dYdX Trading Inc. | Bounty | open | Not listed | Remote | yes | Per-vulnerability severity-based bounty |
| Sui Protocol Bug Bounty Program | Sui Foundation / HackenProof | Bounty | open | Not listed | Remote vulnerability reporting | yes | Per-vulnerability bounty up to $500,000 |
| BitGo Bug Bounty | BitGo | Bounty | open | Not listed | Online / Cantina | yes | Critical $75,000; high $37,500; medium $2,500; low $1,500 |
| Paxos Bug Bounty | Paxos | Bounty | open | Not listed | Online / Cantina | yes | Critical 1,000,000 USDG; high 250,000 USDG; medium 25,000 USDG; low 5,000 USDG |
| Villanova Undergraduate Research Fellows Summer Program — 2027 | Villanova University | Grant / Funding | watch | 2027-03-01 | Villanova University campus | limited | $4,000 student research stipend |
| MSCF Fellowship Award — Fall 2027 class | Carnegie Mellon University MSCF | Grant / Funding | watch | Not listed | Carnegie Mellon University | limited | Up to $50,000 MSCF Fellowship |
University of Waterloo
16-week full-time undergraduate mathematics/computer science research; on-campus or remote
Citadel
Firm-sponsored in-person research-conference travel grant for NeurIPS 2026
University of Minnesota Office of Undergraduate Research
120-hour faculty-mentored undergraduate research project with public presentation
Folks Finance
Security research for Folks Finance lending and digital-asset management protocol
Bucket Protocol / HackenProof
Move smart-contract bounty for Sui DeFi stablecoin, CDP, PSM, and oracle infrastructure
Kamino / Immunefi
Rolling vulnerability bounty for Kamino lending, liquidity, leverage, oracle, and application assets on Solana
Pendle Finance / Cantina
Smart-contract bounty for Boros onchain interest-rate swap markets using CLOB and AMM
NAVI Protocol
Sui perp-vault smart-contract vulnerability research
Bluefin
Sui spot and derivatives exchange smart-contract vulnerability research
idOS Network
Web, API, enclave, identity, and smart-contract vulnerability research
Momentum
Sui smart-contract vulnerability research for crypto and real-world asset infrastructure
Scallop
Sui money-market smart-contract vulnerability research
BlockPI Network
Multichain RPC and acceleration-layer vulnerability disclosure
Cronos
Cronos EVM and DeFi smart-contract vulnerability disclosure
Unitus
Multichain money-market and lending smart-contract research
1inch
DEX liquidity-position smart-contract vulnerability research
ADI Foundation
Airbender prover and zkEVM verifier soundness research
Ample
DeFi smart-contract vulnerability research for Ample Earn, factories, perspectives, and cross-chain routers
Dexalot / HackenProof
Non-custodial CLOB DEX smart-contract vulnerability disclosure
DeXe Protocol
DAO governance, treasury, NFT, and DeXe protocol smart-contract vulnerability research
Ember Protocol / HackenProof
Ember EVM vault smart-contract vulnerability disclosure
FlowX Finance / HackenProof
Sui concentrated-liquidity market-maker smart-contract vulnerability disclosure
Haedal
Sui liquid staking, LST liquidity, and market-maker protocol smart-contract vulnerability research
Layer3
Omnichain distribution, identity, incentive, and staking smart-contract vulnerability research
Multipli
ZK yield protocol smart-contract vulnerability research
NAVI Protocol
Smart-contract and web vulnerability research for NAVI Protocol
NEAR
NEAR Intents MPC network, Omni Bridge, BTC bridge SDK, and relayer security
Raydium
Smart-contract vulnerability research for Raydium Solana on-chain programs
Turbos Finance / HackenProof
Sui concentrated-liquidity market-maker smart-contract vulnerability disclosure
0x
0x DEX aggregation APIs web mobile frontends and settlement smart-contract vulnerability disclosure
Arcadia Finance / HackenProof
Smart-contract vulnerability disclosure for Arcadia margin and leveraged-yield protocol
Cetus / HackenProof
Cetus web and mobile vulnerability disclosure for the Sui DEX and liquidity network
Citrea / HackenProof
Citrea rollup, Clementine bridge, protocol and smart-contract vulnerability disclosure
Ethena
Ethena USDe synthetic-dollar smart-contract and application vulnerability research
Exactly
Exactly fixed- and variable-rate Optimism lending protocol smart-contract vulnerability disclosure
Hedera
Hedera and Hiero blockchain DLT smart-contract and network vulnerability research
Solv Protocol / HackenProof
SolvBTC Solana smart-contract vulnerability disclosure for Bitcoin-native DeFi
SSV Network
SSV Network Ethereum validator DVT smart-contract vulnerability research
Stargate Foundation / StargateDAO
Stargate native-asset bridge and cross-chain liquidity smart-contract vulnerability disclosure
Starknet / HackenProof
Starknet OS, L1 core contracts, protocol and blockchain vulnerability disclosure
Term Structure Labs / TermMax
TermMax fixed-rate lending and customizable AMM pricing-curve smart-contract and web-app vulnerability disclosure
The Graph Foundation
The Graph indexing protocol smart-contract blockchain and indexer vulnerability disclosure
Treehouse Finance / HackenProof
Smart-contract vulnerability disclosure for Treehouse fixed-income and DOR protocol
Zynk / HackenProof
Solana smart-contract vulnerability disclosure for liquidity and settlement infrastructure
Beanstalk
Beanstalk Basin and Pipeline smart-contract vulnerability disclosure
Decentraland
Decentraland smart-contract and application vulnerability disclosure
Derive / Lyra V2 / Immunefi
Options perpetuals and spot protocol smart-contract vulnerability research
ENS
ENS smart-contract and web application vulnerability disclosure
Horizen
Smart-contract and staking web vulnerability disclosure
Monad Foundation / Cantina
Monad consensus execution networking and node vulnerability disclosure
Morpho / Cantina
Live Cantina-triaged vulnerability bounty across Morpho web apps and smart contracts
PancakeSwap / Cantina
PancakeSwap Infinity core contracts and router vulnerability disclosure
Symbiotic / Cantina
Shared-security protocol vulnerability disclosure
42project
Responsible disclosure for crypto trading terminal web app, API, open-source repositories and mobile apps
ADI Foundation / HackenProof
Prediction-market smart-contract vulnerability bounty for the FIFA World Cup 2026 partner
Centrifuge / Cantina
Rolling Cantina-triaged bounty for Centrifuge V3.1 on-chain asset-management protocol
Cetus / HackenProof
Live HackenProof bounty for Cetus DEX and aggregator smart contracts on Sui
Chainlink Labs
Rolling vulnerability disclosure for Chainlink oracle, infrastructure, smart-contract and web applications
Hyperbridge / HackenProof
Cross-chain bridge runtime pallet and smart-contract bounty
Kiln / Cantina
Rolling Cantina-triaged bounty for OmniVault EVM smart contracts and connectors
Kuru Labs
Rolling vulnerability disclosure for Kuru on-chain order-book DEX and CLOB-AMM liquidity infrastructure on Monad
Midas.app / Cantina
Rolling Cantina-triaged bounty for composable on-chain investment products
RedStone
Rolling vulnerability disclosure for RedStone oracle infrastructure serving lending and DeFi protocols
RootstockLabs
Rolling vulnerability disclosure for Rootstock Bitcoin DeFi blockchain, smart contracts and applications
Starknet / HackenProof
Starknet staking smart-contract vulnerability bounty
Starknet / HackenProof
StarkGate smart-contract and web vulnerability bounty
OKX Labs
Onchain smart-contract vulnerability research across EVM Solana Sui and Aptos
Ondo Global (Panama) Inc.
Rolling Cantina-triaged vulnerability disclosure for perpetual-futures trading infrastructure
Polygon
Rolling smart-contract and blockchain vulnerability disclosure program
Reserve Protocol
Rolling Cantina-triaged vulnerability disclosure for Reserve stable-asset infrastructure
Uniswap Labs
Rolling Cantina-triaged vulnerability disclosure for Uniswap protocol, infrastructure, and web applications
1inch
DEX aggregator web and application vulnerability reports
Compound DAO
Security research for Ethereum money markets and Compound III
Gearbox / Immunefi
Smart-contract vulnerability disclosure for a DeFi leverage protocol
Stacks Endowment (Stacks)
Bitcoin-backed asset bridge blockchain and smart-contract vulnerability reports
Velodrome Finance / Optimism Foundation / Immunefi
Smart-contract bug bounty for an Optimism AMM/DEX liquidity hub
Balancer Foundation
Smart-contract and protocol vulnerability bounty
G-Research
Monthly application for research-support grant in quantitative disciplines
GMTrade
Smart-contract and protocol vulnerability bounty
Intuition
Smart-contract and protocol vulnerability bounty
Lista DAO
BNB Chain liquid staking lisUSD CDP and smart-contract vulnerability research
Lombard Finance
LBTC Bitcoin DeFi cross-chain liquidity and smart-contract vulnerability research
Origin Protocol
OUSD DeFi yield smart-contract and web/app vulnerability research
Spark
Smart-contract and web/application vulnerability bounty
Zest Protocol
Bitcoin lending protocol on Stacks; Clarity smart-contract vulnerability research
ZKsync
Blockchain, smart-contract, and web/application vulnerability bounty
BNB Chain / BNB Foundation
Responsible-disclosure bounty for blockchain, cryptography, smart contracts, clients, SDKs, and cross-chain components
Ethereum Foundation
Bug bounty for Ethereum protocol, client, and language compiler bugs
Parallel
Smart-contract and web/app vulnerability disclosure for the Parallel stablecoin protocol
Polymarket
Bug bounty for prediction-market smart contracts, oracle resolution, order matching, fees, and web application
0x Labs
EVM smart contracts and vulnerability research
Aave
Aave v2/v3 pools, governance, safety module, GHO and related smart-contract vulnerability disclosure
GMX
GMX smart contracts and app for spot/perpetual trading, GLP liquidity, fees, liquidations and governance
MUX Protocol
Smart-contract and critical-frontend vulnerability disclosure for a decentralized leveraged trading protocol
OpenZeppelin
Solidity OpenZeppelin Contracts library and vulnerability research
Optimism
OP Stack, OP Mainnet, bridge, governance-proposal, op-node and op-geth vulnerability disclosure
Sei Foundation
Sei chain bridge validator and network security vulnerability research
Threshold Network
tBTC threshold cryptography bridges and smart-contract vulnerability research
Wormhole
Cross-chain messaging, guardian, Portal Token Bridge, Native Token Transfer smart-contract and infrastructure disclosure
Cosmos Labs
Cosmos protocol, module, consensus, validator, wallet and infrastructure bounty
Sky, formerly MakerDAO
Stablecoin, CDP, lending, staking, smart-contract and web/app bounty
Synthetix
Perpetual-futures on-chain custody smart-contract and application bounty
Veda
DeFi vault smart-contract vulnerability bounty
Base / Coinbase
Base network, infrastructure and deployed smart-contract vulnerability reports
Coinbase
Responsible disclosure of vulnerabilities in Coinbase-deployed smart contracts
Dune
Responsible disclosure for Dune application and API vulnerabilities
dYdX Trading Inc.
Protocol, indexer, web client and SDK vulnerability disclosure
Sui Foundation / HackenProof
Move VM validator consensus network and protocol vulnerability research
BitGo
Responsible disclosure for BitGo Ethereum multisig wallet protocol
Paxos
Responsible disclosure for Paxos stablecoin, gold-token, bridge contracts and production APIs
Villanova University
10-week full-time undergraduate independent research with faculty mentor
Carnegie Mellon University MSCF
Graduate computational-finance program with automatic fellowship consideration
No programs match these filters.