Vetted on both sides
CertiK carefully selects and approves both the programs and the researchers — no open submissions, no anonymous spam.
Prove your skill.
Find what others miss.
Security challenges and bug bounties — one trusted researcher network. Start with guided investigations and earn access to confidential production programs, with CertiK independently verifying every finding.
5,181
Projects secured by CertiK
$500B+
Assessed by CertiK since 2018
Currently invite-only for vetted researchers and selected protocol partners.
Active programs
How it works
How CertiK Hunt works
challenge.brief
FormatSecurity challenge
AccessChallenger
WindowFixed start · fixed close
What you do
Investigate the scenario end to endExplain the impact, not just the bugSubmit before the window closes
Scored onImpact, reproduction, clarity
ResultRanked on a public leaderboard
Closes in04d 11h 26m
Enter challenge
01
Start with a challenge
Focused, time-boxed security challenges open to every approved researcher. Finish one and you have a verified track record on Hunt, not a claim.
02
Unlock confidential bug bounties
Continuous coverage of live production systems at the top access level, with CertiK verifying every finding before the protocol sees it.
Two formats
Explore both formats
Challenges and bug bounties run on one network and one access ladder. Every level inherits the formats below it.
Why CertiK Hunt
Built for signal, not noise
Real vulnerabilities. Real rewards.
Independent verification
Every submission undergoes an independent review by CertiK to validate the finding before it is shared with the project.
Confidential by default
Every submission is handled confidentially, with security and privacy maintained throughout the process.
The network
For researchers and protocols
A private network connecting vetted researchers with serious protocols, with CertiK validating findings in between.
Researchers
High-quality programs
Vetted, funded programs with active scopes and clear reward terms.
Independent verification
CertiK reviews reproducibility, severity, and scope before escalation.
Tracked decisions and rewards
Status, rationale, and payout progress stay visible in one place.
Protocols
Reproduced findings only
Spam, duplicates, and out-of-scope reports are filtered before review.
CertiK-led triage
A CertiK expert reproduces the finding and rates its severity.
Controlled disclosure
Reports remain confidential through a scoped responsible disclosure process.
Two paths
Get started with CertiK Hunt
Join one trusted network for focused security challenges and continuous bug bounty programs — with every finding independently verified by CertiK.
Researchers
Join as a researcher
Request access or redeem an existing code to start with challenges and qualify for bug bounties.
- Two formats, one access ladder
- Independent finding review
Protocols
Run an engagement
Launch a continuous bug bounty with CertiK verifying every finding before it reaches your team.
- Format-specific setup
- Screened confidential intake
