RedStone launches bug bounty programs offering up to $250K rewards - Crypto Briefing
Modular oracle provider RedStone Finance has launched two bug bounty programs offering up to $250,000 for critical smart contract vulnerabilities and up to $10,000 for web issues.
The programs, branded as "treats for bugs," were publicly announced on October 31, 2026, though they went live on October 22. RedStone isn't running the programs in-house, instead using HackenProof and Cantina platforms to handle vulnerability submissions and triage.
Bounty Structure
The smart contract program offers rewards based on severity: critical issues can earn up to $250,000, high findings up to $50,000, medium up to $10,000, and low up to $1,000. The web bounty program tops out at $10,000 for critical issues affecting multiple RedStone domains.
Oracle Security Importance
Oracles bring outside data into smart contracts, enabling protocols to make decisions like loan liquidations. RedStone secures over $10 billion in DeFi value and serves clients including Spark, Compound, Morpho, and Lido. It also provides oracle functionality for Securitize products associated with BlackRock and Apollo.
Broader Security Strategy
The bug bounties are part of RedStone's multi-layered security approach that includes external audits from firms like Quantstamp and PeckShield. By late October 2026, more than 201 submissions had already been logged on HackenProof, indicating active researcher engagement.
Related
