RedStone Bug Bounty Offers Up to $250,000 for Smart Contract Vulnerabilities - The Cryptonomist
RedStone Finance announced two bug bounty programs on October 31, 2026, offering up to $250,000 for critical smart contract vulnerabilities and up to $10,000 for critical web-facing flaws.
The programs went live on October 22, 2026, with separate reward pools covering smart contract flaws and web-facing services. By late October, HackenProof had logged more than 201 submissions, though this figure includes all reports, not just confirmed vulnerabilities.
Reward Structure
The smart contract program pays according to severity: $250,000 for critical findings, $50,000 for high-severity issues, $10,000 for medium-severity problems, and $1,000 for low-severity flaws. The web program offers up to $10,000 for critical vulnerabilities.
Security Strategy
Oracles supply outside information to blockchain applications. Smart contracts cannot independently check asset prices beyond their own network, so lending protocols use oracle data to value collateral and determine when loans require liquidation.
RedStone frames the bug bounty programs as part of a broader security approach that includes regular external audits and rigorous development controls. The company says its oracle services secure over $10 billion in DeFi value across clients including Spark, Compound, Morpho, and Lido.
Related
