โ All Bounties
PoolTogether
PoolTogether is a DeFi protocol deployed on ethereum, optimism, polygon. Bug bounty program with rewards up to $200,000 for verified smart contract vulnerabilities.
ETHOPMATICARBBaseAVAXDeFi
Max Bounty$200,000
Min Bounty$500
PayoutUSDC
Findings0
Accepted0
Chains6
01Severity & Rewards
02Program Rules
- 01KYC is not required for this program. Pseudonymous submissions are accepted.
- 02Only previously unreported vulnerabilities are eligible. Duplicate submissions will be closed.
- 03Vulnerabilities must be reported through the WhiteClaws platform. Public disclosure before resolution disqualifies the submission.
- 04Testing must not disrupt live protocol operations. Use mainnet forks or testnets for Proof of Concept execution.
โ IN SCOPE
- โCore protocol smart contracts
- โToken contracts (ERC-20, ERC-721, etc.)
- โAccess control and admin functions
- โProxy and upgrade patterns
- โIntegration and adapter contracts
โ OUT OF SCOPE
- โFrontend applications
- โOff-chain infrastructure
โ Protocol Information
Resources