Unverified50% confidenceFactExact time
Traditional bug bounty programs usually price vulnerabilities by severity level, with the bounty tied only to the vulnerability itself.
1
Sources
50%
Confidence
Long-term
Relevance
11/3/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedA vulnerability bounty is a mechanism by which vendors publicly invite security researchers to test their systems and pay rewards based on vulnerability severity.76% similarVerifiedBug bounty programs are hosted on platforms such as HackerOne and Bugcrowd, where companies incentivize white-hat hackers to discover vulnerabilities by offering monetary rewards.75% similarUnverifiedVulnerabilities are typically classified into four severity levels—low, medium, high, and critical—with bounties ranging from tens of yuan to tens of thousands of yuan.73% similarUnverified在真实SRC或漏洞赏金平台成功挖出并提交通过审核此类漏洞，拿到500元甚至更高赏金属于常态71% similarUnverifiedSmart contracts carry the risk of code vulnerabilities, which attackers may exploit to move funds, and on-chain transactions are usually irreversible, making losses hard to recover; therefore, whether a project has undergone sufficient auditing and whether its contracts are upgradeable are important references for users assessing risk.71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1129469API
curl https://kongchang.com/api/v1/knowledge/claims/1129469MCP
get_claim(id=1129469)