{"id":6144,"date":"2025-10-31T18:14:12","date_gmt":"2025-10-31T18:14:12","guid":{"rendered":"https:\/\/hederav2stg.wpenginepowered.com\/?page_id=6144"},"modified":"2025-12-18T19:58:19","modified_gmt":"2025-12-19T00:58:19","slug":"bug-bounty","status":"publish","type":"page","link":"https:\/\/hedera.com\/bug-bounty\/","title":{"rendered":"Bug Bounty"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\treport vulnerabilities. earn rewards.\n\t\t\t\t\t\t<\/p>\n\t\t\t\t\t\t\t

\n\t\n\t\t\tBug Bounty Program\n\t\t<\/h1>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Help maintain trust and prevent exploits on the Hedera network by taking part in an incentive program to identify and responsibly disclose security vulnerabilities. The Hedera Bug Bounty Program embodies the decentralized ethos of web3 by engaging the broader community in proactive and transparent testing and reporting.\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t \t \n Report Bug\n <\/a>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Hedera\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Stronger\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\thelp safeguard the network\n\t\t\t\t\t\t<\/p>\n\t\t\t\t\t\t\t

\n\t\n\t\t\tA stronger ecosystem \n\n\t\t<\/h2>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Contribute to the strength of the Hedera network by finding and submitting bugs and vulnerabilities in the platform, services, and developer tools. Shared efforts improve the robustness and security of the entire ecosystem.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\n\t\t\tFind bugs \n\n\t\t<\/h3>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Explore Hedera network services and developer tools<\/a> to identify vulnerabilities. Follow the rules of engagement while testing.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\n\t\t\tSubmit a report \n\n\t\t<\/h3>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Document your findings and submit a bug report<\/a> with a clear description of the issue.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\n\t\t\tEarn rewards \n\n\t\t<\/h3>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The Hedera team will review your submission and may request further information. Rewards are determined on a case-by-case basis, with no cap on potential earnings.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\tbug bounty guidelines\n\t\t\t\t\t\t<\/p>\n\t\t\t\t\t\t\t

\n\t\n\t\t\tRules of engagement \n\n\t\t<\/h2>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t
<\/circle><\/svg><\/div>\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\n\t\t\tDon't use another user's account\n\t\t<\/h4>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Cross-account testing is allowed, but only with accounts that you own or control.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t
<\/circle><\/svg><\/div>\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\n\t\t\tUse testnet for all testing \n\t\t<\/h4>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tMainnet is for production only and must not be used for testing.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
<\/circle><\/svg><\/div>\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\n\t\t\tDon't publicly disclose a bug before it's fixed\n\t\t<\/h4>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tPublic disclosure before remediation could harm the Hedera network and community, and will result in no reward for the discovery.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
<\/circle><\/svg><\/div>\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\n\t\t\tDon't impact others during testing\n\t\t<\/h4>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tTesting must never affect accounts you do not own. \t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
<\/circle><\/svg><\/div>\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\n\t\t\tNever attempt non-technical attacks\n\t\t<\/h4>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Social engineering, phishing, or physical attacks against Hedera employees, users, or the network infrastructure are strictly prohibited.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t
<\/circle><\/svg><\/div>\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\n\t\t\t Provide detailed, reproducible reports\n\t\t<\/h4>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t Reports must be detailed enough to reproduce the issue. Incomplete reports are not eligible for rewards. \t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
<\/circle><\/svg><\/div>\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\n\t\t\tOne vulnerability per report \n\t\t<\/h4>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tExceptions apply only if you need to chain vulnerabilities to show impact. \t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
<\/circle><\/svg><\/div>\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\n\t\t\tNo rewards for duplicate reports\n\t\t<\/h4>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tRewards are given only to the first reproducible report received.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
<\/circle><\/svg><\/div>\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\n\t\t\tOne reward per root cause\n\t\t<\/h4>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tIf multiple vulnerabilities stem from the same underlying issue, only one bounty will be rewarded.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\n\t\t\tHiero Improvement Proposals \n\t\t<\/h2>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Have a suggestion or feature request? The Hiero Improvement Proposal (HIP) program is the place to do it. HIPs can encompass changes to the core protocol as well as applications, frameworks, and protocols built on Hiero.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t \t \n HIP Repository\n <\/a>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t
<\/path><\/path><\/path><\/path><\/path><\/path><\/svg><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

\n\t\n\t\t\tFind a vulnerability?\n\t\t<\/h2>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Send a report with a description of your security vulnerability findings to earn rewards.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t \t \n Report Bug\n <\/a>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

report vulnerabilities. earn rewards. Bug Bounty Program Help maintain trust and prevent exploits on the Hedera network by taking part in an incentive program to identify and responsibly disclose security vulnerabilities. The Hedera Bug Bounty Program embodies the decentralized ethos of web3 by engaging the broader community in proactive and transparent testing and reporting.\u00a0 Report […]<\/p>\n","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"class_list":["post-6144","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nBug Bounty | Hedera<\/title>\n<meta name=\"description\" content=\"Help maintain trust and prevent exploits on the Hedera network by taking part in an incentive program to identify and responsibly disclose security vulnerabilities. The Hedera Bug Bounty Program embodies the decentralized ethos of web3 by engaging the broader community in proactive and transparent testing and reporting.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hedera.com\/bug-bounty\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Bug Bounty | Hedera\" \/>\n<meta property=\"og:description\" content=\"Help maintain trust and prevent exploits on the Hedera network by taking part in an incentive program to identify and responsibly disclose security vulnerabilities. The Hedera Bug Bounty Program embodies the decentralized ethos of web3 by engaging the broader community in proactive and transparent testing and reporting.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hedera.com\/bug-bounty\/\" \/>\n<meta property=\"og:site_name\" content=\"Hedera\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-19T00:58:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/hedera.com\/wp-content\/uploads\/2025\/12\/BugBounty_MetaImage.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1080\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/hedera.com\/wp-content\/uploads\/2025\/12\/BugBounty_MetaImage.png\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/hedera.com\/bug-bounty\/\",\"url\":\"https:\/\/hedera.com\/bug-bounty\/\",\"name\":\"Bug Bounty | Hedera\",\"isPartOf\":{\"@id\":\"https:\/\/hedera.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/hedera.com\/bug-bounty\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/hedera.com\/bug-bounty\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/hedera.com\/wp-content\/uploads\/2025\/11\/hedera-bug-bounty-v4.png\",\"datePublished\":\"2025-10-31T18:14:12+00:00\",\"dateModified\":\"2025-12-19T00:58:19+00:00\",\"description\":\"Help maintain trust and prevent exploits on the Hedera network by taking part in an incentive program to identify and responsibly disclose security vulnerabilities. The Hedera Bug Bounty Program embodies the decentralized ethos of web3 by engaging the broader community in proactive and transparent testing and reporting.\",\"breadcrumb\":{\"@id\":\"https:\/\/hedera.com\/bug-bounty\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/hedera.com\/bug-bounty\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/hedera.com\/bug-bounty\/#primaryimage\",\"url\":\"https:\/\/hedera.com\/wp-content\/uploads\/2025\/11\/hedera-bug-bounty-v4.png\",\"contentUrl\":\"https:\/\/hedera.com\/wp-content\/uploads\/2025\/11\/hedera-bug-bounty-v4.png\",\"width\":1302,\"height\":856,\"caption\":\"Hedera Bug Bounty\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/hedera.com\/bug-bounty\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/hedera.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Bug Bounty\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/hedera.com\/#website\",\"url\":\"https:\/\/hedera.com\/\",\"name\":\"Hedera\",\"description\":\"Hello future\",\"publisher\":{\"@id\":\"https:\/\/hedera.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/hedera.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/hedera.com\/#organization\",\"name\":\"Hedera\",\"url\":\"https:\/\/hedera.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/hedera.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/hedera.com\/wp-content\/uploads\/2025\/09\/hedera_logo.png\",\"contentUrl\":\"https:\/\/hedera.com\/wp-content\/uploads\/2025\/09\/hedera_logo.png\",\"width\":500,\"height\":375,\"caption\":\"Hedera\"},\"image\":{\"@id\":\"https:\/\/hedera.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Bug Bounty | Hedera","description":"Help maintain trust and prevent exploits on the Hedera network by taking part in an incentive program to identify and responsibly disclose security vulnerabilities. The Hedera Bug Bounty Program embodies the decentralized ethos of web3 by engaging the broader community in proactive and transparent testing and reporting.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hedera.com\/bug-bounty\/","og_locale":"en_US","og_type":"article","og_title":"Bug Bounty | Hedera","og_description":"Help maintain trust and prevent exploits on the Hedera network by taking part in an incentive program to identify and responsibly disclose security vulnerabilities. The Hedera Bug Bounty Program embodies the decentralized ethos of web3 by engaging the broader community in proactive and transparent testing and reporting.","og_url":"https:\/\/hedera.com\/bug-bounty\/","og_site_name":"Hedera","article_modified_time":"2025-12-19T00:58:19+00:00","og_image":[{"width":1920,"height":1080,"url":"https:\/\/hedera.com\/wp-content\/uploads\/2025\/12\/BugBounty_MetaImage.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_image":"https:\/\/hedera.com\/wp-content\/uploads\/2025\/12\/BugBounty_MetaImage.png","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hedera.com\/bug-bounty\/","url":"https:\/\/hedera.com\/bug-bounty\/","name":"Bug Bounty | Hedera","isPartOf":{"@id":"https:\/\/hedera.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hedera.com\/bug-bounty\/#primaryimage"},"image":{"@id":"https:\/\/hedera.com\/bug-bounty\/#primaryimage"},"thumbnailUrl":"https:\/\/hedera.com\/wp-content\/uploads\/2025\/11\/hedera-bug-bounty-v4.png","datePublished":"2025-10-31T18:14:12+00:00","dateModified":"2025-12-19T00:58:19+00:00","description":"Help maintain trust and prevent exploits on the Hedera network by taking part in an incentive program to identify and responsibly disclose security vulnerabilities. The Hedera Bug Bounty Program embodies the decentralized ethos of web3 by engaging the broader community in proactive and transparent testing and reporting.","breadcrumb":{"@id":"https:\/\/hedera.com\/bug-bounty\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hedera.com\/bug-bounty\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hedera.com\/bug-bounty\/#primaryimage","url":"https:\/\/hedera.com\/wp-content\/uploads\/2025\/11\/hedera-bug-bounty-v4.png","contentUrl":"https:\/\/hedera.com\/wp-content\/uploads\/2025\/11\/hedera-bug-bounty-v4.png","width":1302,"height":856,"caption":"Hedera Bug Bounty"},{"@type":"BreadcrumbList","@id":"https:\/\/hedera.com\/bug-bounty\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hedera.com\/"},{"@type":"ListItem","position":2,"name":"Bug Bounty"}]},{"@type":"WebSite","@id":"https:\/\/hedera.com\/#website","url":"https:\/\/hedera.com\/","name":"Hedera","description":"Hello future","publisher":{"@id":"https:\/\/hedera.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hedera.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/hedera.com\/#organization","name":"Hedera","url":"https:\/\/hedera.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hedera.com\/#\/schema\/logo\/image\/","url":"https:\/\/hedera.com\/wp-content\/uploads\/2025\/09\/hedera_logo.png","contentUrl":"https:\/\/hedera.com\/wp-content\/uploads\/2025\/09\/hedera_logo.png","width":500,"height":375,"caption":"Hedera"},"image":{"@id":"https:\/\/hedera.com\/#\/schema\/logo\/image\/"}}]}},"featured_image_src":null,"featured_image_src_square":null,"_links":{"self":[{"href":"https:\/\/hedera.com\/wp-json\/wp\/v2\/pages\/6144","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hedera.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/hedera.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/hedera.com\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/hedera.com\/wp-json\/wp\/v2\/comments?post=6144"}],"version-history":[{"count":0,"href":"https:\/\/hedera.com\/wp-json\/wp\/v2\/pages\/6144\/revisions"}],"wp:attachment":[{"href":"https:\/\/hedera.com\/wp-json\/wp\/v2\/media?parent=6144"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}